From 284daf7f68877e84452c23f6f25816e1503cb5bd Mon Sep 17 00:00:00 2001
From: Martin Trigaux <mat@odoo.com>
Date: Wed, 18 Nov 2020 09:18:23 +0000
Subject: [PATCH] [FIX] web: remove formating from event title

When copy-pasting text from rich text, the content may contain
unwanted formating instructions. Unsure it's escaped to avoid
propagating the content.

X-original-commit: 42f596a5b50e530fd5dc3f8c2939bc5b4e5921af
---
 addons/web/static/src/js/views/calendar/calendar_controller.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/addons/web/static/src/js/views/calendar/calendar_controller.js b/addons/web/static/src/js/views/calendar/calendar_controller.js
index 43afd983fb3..aaed2d82abb 100644
--- a/addons/web/static/src/js/views/calendar/calendar_controller.js
+++ b/addons/web/static/src/js/views/calendar/calendar_controller.js
@@ -398,7 +398,7 @@ var CalendarController = AbstractController.extend({
             res_model: self.modelName,
             res_id: id || null,
             context: event.context || self.context,
-            title: _t("Open: ") + event.data.title,
+            title: _t("Open: ") + _.escape(event.data.title),
             on_saved: function () {
                 if (event.data.on_save) {
                     event.data.on_save();