Fixes #22 with escape()

7 years ago · 424c279e9e
1 changed files with 1 additions and 1 deletions
--- a/js/transaction.js
+++ b/js/transaction.js
@ -1373,7 +1373,7 @@ $(function() {
 										original_price: original_price,
 										amount: price,
 										redeemed_hours: parseFloat($("#volunteer_hours").text()) || rh,
-										description: $("#description").val(), 
+										description: escape($("#description").val()), 
 										sold_to: sold_to,
 										sold_by: $("[name='sold_by']").val(),
 										quantity: $("#quantity").val(),