From 6a489de1671fed0ea54560e31ad40c43e83c975f Mon Sep 17 00:00:00 2001
From: Zalmoxisus <zalmoxisus@gmail.com>
Date: Wed, 5 Nov 2014 12:45:55 +0200
Subject: [PATCH] Escape tags to fix issue #182

---
 contact_list.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/contact_list.js b/contact_list.js
index aee7af0251..dafeed1bdd 100644
--- a/contact_list.js
+++ b/contact_list.js
@@ -220,7 +220,7 @@ var ContactList = (function (my) {
      */
     function createDisplayNameParagraph(displayName) {
         var p = document.createElement('p');
-        p.innerHTML = displayName;
+        p.innerText = displayName;
 
         return p;
     }
@@ -266,7 +266,7 @@ var ContactList = (function (my) {
         var contactName = $('#contactlist #' + resourceJid + '>p');
 
         if (contactName && displayName && displayName.length > 0)
-            contactName.html(displayName);
+            contactName.text(displayName);
     });
 
     my.setClickable = function(resourceJid, isClickable) {