Merge pull request #8302 from annando/allowed-chars

[friendica.git] / view / theme / frio / js / mod_events.js

diff --git a/view/theme/frio/js/mod_events.js b/view/theme/frio/js/mod_events.js
index 9d10bbb8e7e25d16fb4a059c38c4e9f01f3df7d2..00e3f4fa9f129ff26cdf1750301b665ccbc96b02 100644 (file)
--- a/view/theme/frio/js/mod_events.js
+++ b/view/theme/frio/js/mod_events.js
@@ -1,6 +1,6 @@
 /**
  * @file view/theme/frio/js/mod_events.js
- * @brief Initialization of the fullCalendar and format the output.
+ * Initialization of the fullCalendar and format the output.
  */
 
 $(document).ready(function() {
@@ -82,6 +82,9 @@ $(document).ready(function() {
                                trigger: "hover",
                                placement: "auto",
                                template: '<div class="popover hovercard event-card"><div class="arrow"></div><div class="popover-content hovercard-content"></div></div>',
+                               sanitizeFn: function (content) {
+                                       return DOMPurify.sanitize(content)
+                               },
                        });
 
                }