Properly escape list of messages when creating a new entry

This has been broken since day 1... oops.

Noted by Vik Fearing

diff --git a/pgcommitfest/commitfest/static/commitfest/js/commitfest.js b/pgcommitfest/commitfest/static/commitfest/js/commitfest.js
index 69c41ecec3092447f3f279a28e5478c2d942f305..2f1eddae78d4e0d522f9564858d422c552cd571f 100644 (file)
--- a/pgcommitfest/commitfest/static/commitfest/js/commitfest.js
+++ b/pgcommitfest/commitfest/static/commitfest/js/commitfest.js
@@ -20,7 +20,7 @@ function findLatestThreads() {
          sel = $('#attachThreadList');
          sel.find('option').remove();
          $.each(data, function(m,i) {
-            sel.append('<option value="' + i.msgid + '">' + i.from + ': ' + i.subj + ' (' + i.date + ')</option>');
+             sel.append($('<option/>').text(i.from + ': ' + i.subj + ' (' + i.date + ')').val(i.msgid));
          });
    }).always(function() {
       $('#attachThreadListWrap').removeClass('loading');