[AIRFLOW-5348] Escape chart Label when set via JS (#5952)

(cherry picked from commit 6c4b2ba9bab6b11cd2a2b91afebd6d9886c71ad0)
apache · Aug 30, 2019 · 267e363 · 267e363
1 parent 37b8f25
commit 267e363
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/airflow/www/templates/airflow/nvd3.html b/airflow/www/templates/airflow/nvd3.html
@@ -164,7 +164,7 @@ <h4 class="panel-title">
           $('#chart_body').html('<div class="alert alert-danger">' + payload.error + '</div>');
         }
         $("#sql_panel_body").html(payload.sql_html);
-        $("#label").html(payload.label);
+        $("#label").text(payload.label);
         if (payload.state == "SUCCESS") {
           {% if chart.chart_type != "datatable" %}
             $('#chart_body').css('width', '100%');