From 4dcce60fb894340b932b2b8d6494576098e00b1c Mon Sep 17 00:00:00 2001
From: Ilya Konanykhin <ilya.konanykhin@gmail.com>
Date: Wed, 18 Jan 2017 14:59:48 +0600
Subject: [PATCH] Fix: HTML injection

---
 app/assets/javascripts/time_entries.js | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/app/assets/javascripts/time_entries.js b/app/assets/javascripts/time_entries.js
index bbf4903..ecf050b 100644
--- a/app/assets/javascripts/time_entries.js
+++ b/app/assets/javascripts/time_entries.js
@@ -59,9 +59,9 @@ $(document).ready(function () {
         var start_date = row.data("start_date");
         var duration = row.data("duration");
         var description = row.data("description");
-        $("#work_entry_start_date").html(start_date);
-        $("#work_entry_duration").html(duration);
-        $("#work_entry_description").html(description);
+        $("#work_entry_start_date").text(start_date);
+        $("#work_entry_duration").text(duration);
+        $("#work_entry_description").text(description);
         $("#confirmation_delete").data("entry_id", entry_id);
     });