From 608c79ed5645bbd33d321ba725fb90c7a87a2c88 Mon Sep 17 00:00:00 2001
From: mabashian <mabashia@redhat.com>
Date: Thu, 3 Aug 2017 09:43:13 -0400
Subject: [PATCH] Sanitize notification/schedule list titles

---
 .../src/management-jobs/notifications/notification.route.js   | 4 ++--
 awx/ui/client/src/management-jobs/scheduler/main.js           | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/awx/ui/client/src/management-jobs/notifications/notification.route.js b/awx/ui/client/src/management-jobs/notifications/notification.route.js
index 8d327c1528..a6b1f30d8a 100644
--- a/awx/ui/client/src/management-jobs/notifications/notification.route.js
+++ b/awx/ui/client/src/management-jobs/notifications/notification.route.js
@@ -16,9 +16,9 @@ export default {
     views: {
         '@managementJobsList': {
             controller: 'managementJobsNotificationsController',
-            templateProvider: function(NotificationsList, generateList, ParentObject) {
+            templateProvider: function(NotificationsList, generateList, ParentObject, $filter) {
                 // include name of parent resource in listTitle
-                NotificationsList.listTitle = `${ParentObject.name}<div class='List-titleLockup'></div>` + N_('Notifications');
+                NotificationsList.listTitle = `${$filter('sanitize')(ParentObject.name)}<div class='List-titleLockup'></div>` + N_('Notifications');
                 let html = generateList.build({
                     list: NotificationsList,
                     mode: 'edit'
diff --git a/awx/ui/client/src/management-jobs/scheduler/main.js b/awx/ui/client/src/management-jobs/scheduler/main.js
index b40dda21ac..4c1cb50ce5 100644
--- a/awx/ui/client/src/management-jobs/scheduler/main.js
+++ b/awx/ui/client/src/management-jobs/scheduler/main.js
@@ -27,9 +27,9 @@ angular.module('managementJobScheduler', [])
             },
             views: {
                 '@managementJobsList': {
-                    templateProvider: function(ScheduleList, generateList, ParentObject) {
+                    templateProvider: function(ScheduleList, generateList, ParentObject, $filter) {
                         // include name of parent resource in listTitle
-                        ScheduleList.listTitle = `${ParentObject.name}<div class='List-titleLockup'></div>` + N_('SCHEDULES');
+                        ScheduleList.listTitle = `${$filter('sanitize')(ParentObject.name)}<div class='List-titleLockup'></div>` + N_('SCHEDULES');
                         let html = generateList.build({
                             list: ScheduleList,
                             mode: 'edit'