From 5e61388b654e5c461fc91e6bffbc110a632da9bb Mon Sep 17 00:00:00 2001
From: Stephen Abello <stephen.abello@combodo.com>
Date: Tue, 7 Dec 2021 09:56:20 +0100
Subject: [PATCH] =?UTF-8?q?N=C2=B04495=20Security=20hardening?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 js/search/search_form_criteria_enum.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/js/search/search_form_criteria_enum.js b/js/search/search_form_criteria_enum.js
index 9a8ecadd4..12d682584 100644
--- a/js/search/search_form_criteria_enum.js
+++ b/js/search/search_form_criteria_enum.js
@@ -225,7 +225,7 @@ $(function()
 			for (var i in aSortedValues)
 			{
 				var sValCode = aSortedValues[i][0];
-				var sValLabel = aSortedValues[i][1];
+				var sValLabel = $('<div/>').html(aSortedValues[i][1]).text();
 				var oValueElem = this._makeListItemElement(sValLabel, sValCode);
 				oValueElem.appendTo(oDynamicListElem);