Escape HTML in thread dropdown when using javascript

diff --git a/django/archives/mailarchives/templates/message.html b/django/archives/mailarchives/templates/message.html
index 599d827ebb6ab7b4ed5a9eb3b028b9ff9a4a724c..4eef750a0b06c30347de47e4aaef4ee75f1cf831 100644 (file)
--- a/django/archives/mailarchives/templates/message.html
+++ b/django/archives/mailarchives/templates/message.html
@@ -11,6 +11,7 @@ function onThreadSelect() {
 $(function(){
    $('select#thread_select').selectmenu({
       style:'dropdown',
+      escapeHtml:true,
       icons:[
          {find:'.hasatt', icon: 'ui-icon-document'},
       ]