fix: escape metric segment auto complete, fixes #9423

8 years ago · ec802dbc1f
parent 9e61cacd16
commit ec802dbc1f
1 changed files with 3 additions and 1 deletions
--- a/public/app/core/directives/metric_segment.js
+++ b/public/app/core/directives/metric_segment.js
@ -79,7 +79,9 @@ function (_, $, coreModule) {
          $scope.$apply(function() {
            $scope.getOptions({ $query: query }).then(function(altSegments) {
              $scope.altSegments = altSegments;
-              options = _.map($scope.altSegments, function(alt) { return alt.value; });
+              options = _.map($scope.altSegments, function(alt) {
+                return _.escape(alt.value);
+              });

              // add custom values
              if (segment.custom !== 'false') {