From 746ca86ca146dbc815959c90c6f60df05e6354a9 Mon Sep 17 00:00:00 2001
From: Sean Fridman <fridman@mail.sfsu.edu>
Date: Tue, 21 Apr 2015 13:05:46 -0400
Subject: Escape stringified JSON for use in HTML attr

---
 themes/okadmin/templates/index.liquid | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/themes/okadmin/templates/index.liquid b/themes/okadmin/templates/index.liquid
index d25100f..e9ad538 100644
--- a/themes/okadmin/templates/index.liquid
+++ b/themes/okadmin/templates/index.liquid
@@ -17,7 +17,8 @@
           {% for data in resource.data %}
             <li>
               <a href="{{resource.type}}/{{data.id}}/">{{data.title}}</a>
-              <input class="resource-input" type="hidden" name="{{resource.type}}[{{forloop.index0}}]" value='{{data | stringify}}'>
+              <input class="resource-input" type="hidden" name="{{resource.type}}[{{forloop.index0}}]"
+                  value='{{data | stringify | escape_once}}'>
             </li>
           {% endfor %}
           </ol>
-- 
cgit v1.2.3-70-g09d2