Solves issue RocketChat#1 at user input

kamushadenes · Mar 13, 2017 · 0d9adcd · 0d9adcd
1 parent 930e983
commit 0d9adcd
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/rocketchat-ui-sidenav/client/createCombinedFlex.coffee b/packages/rocketchat-ui-sidenav/client/createCombinedFlex.coffee
@@ -84,7 +84,7 @@ Template.createCombinedFlex.events
 
 	'click .save-channel': (e, instance) ->
 		err = SideNav.validate()
-		name = instance.find('#channel-name').value.toLowerCase().trim()
+		name = instance.find('#channel-name').value.toLowerCase().trim().replace(/</g, "&lt;").replace(/>/g, "&gt;")
 		privateGroup = instance.find('#channel-type').checked
 		readOnly = instance.find('#channel-ro').checked
 		createRoute = if privateGroup then 'createPrivateGroup' else 'createChannel'