Merge pull request #4619 from nextcloud/fix/ui/escape-title-org

fix(ui): escape organization/title properties

Author: hamza221

package-lock.json

@@ -64,6 +64,7 @@
     "debounce": "^2.2.0",
     "downloadjs": "^1.4.7",
     "ical.js": "^2.2.1",
+    "lodash": "^4.17.21",
     "mitt": "^3.0.1",
     "moment": "^2.30.1",
     "p-limit": "^6.2.0",

package.json

@@ -365,6 +365,7 @@
 </template>
 
 <script>
+import escape from 'lodash/fp/escape.js'
 import { showError } from '@nextcloud/dialogs'
 
 import ICAL from 'ical.js'
@@ -725,9 +726,9 @@ export default {
 					organization,
 				})
 			} else if (title) {
-				return title
+				return escape(title)
 			} else if (organization) {
-				return organization
+				return escape(organization)
 			}
 
 			return ''

src/components/ContactDetails.vue

@@ -44,6 +44,7 @@
 </template>
 
 <script>
+import escape from 'lodash/fp/escape.js'
 import { isMobile, NcEmptyContent, NcLoadingIcon } from '@nextcloud/vue'
 import IconContact from 'vue-material-design-icons/AccountMultiple.vue'
 import mitt from 'mitt'
@@ -112,9 +113,9 @@ export default {
 					organization,
 				})
 			} else if (title) {
-				return title
+				return escape(title)
 			} else if (organization) {
-				return organization
+				return escape(organization)
 			}
 
 			return ''