The text search was vulnerable to double quote marks in members names.

Now filtering those out.

diff --git a/views/admin/members/list.html b/views/admin/members/list.html
index b792214..c357c9f 100644 (file)
--- a/views/admin/members/list.html
+++ b/views/admin/members/list.html
@@ -203,7 +203,7 @@
 
              var availableTags = [
     {foreach $namesList as $m}
-                { label: "{$m.name|unescape:'html'}", value: "{$m.name|unescape:'html'}", id: '{$m.id}' },
+                { label: "{$m.name|unescape:'html'|replace:'"':''}", value: "{$m.name|unescape:'html'|replace:'"':''}", id: '{$m.id}' },
     {/foreach}
              ];