strip EAD tags out of form values (#29)

AtlasSystems · Jan 11, 2019 · bac74ec · bac74ec
1 parent 823d21e
commit bac74ec
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/public/views/aeon/_aeon_request_action.html.erb b/public/views/aeon/_aeon_request_action.html.erb
@@ -14,11 +14,11 @@ mapper = AeonRecordMapper.mapper_for(record)
         <% if name.casecmp('requests').zero? %>
           <% value.each do |request| %>
             <% request.each do |request_param, request_value| %>
-              <input type='hidden' name='<%= request_param %>' value='<%= request_value %>' />
+              <input type='hidden' name='<%= request_param %>' value='<%= strip_tags(request_value.to_s) %>' />
             <% end %>
           <% end %>
         <% else %>
-          <input type='hidden' name='<%= name %>' value='<%= value %>' />
+          <input type='hidden' name='<%= name %>' value='<%= strip_tags(value.to_s) %>' />
         <% end %>
       <% end %>