Escape title

galaxyproject · Aug 6, 2024 · 8eb79e7 · 8eb79e7
1 parent 326b9f4
commit 8eb79e7
Showing 1 changed file with 9 additions and 6 deletions.
diff --git a/config/plugins/visualizations/common/templates/script_entry_point.mako b/config/plugins/visualizations/common/templates/script_entry_point.mako
@@ -12,12 +12,15 @@
 ## Create a container, attach data and import script file
 <%def name="get_body()">
     ## Collect incoming data
-    <% data_incoming = {
-        "root": h.url_for("/"),
-        "visualization_id": visualization_id,
-        "visualization_name": visualization_name,
-        "visualization_plugin": visualization_plugin,
-        "visualization_config": config }
+    <%
+        from markupsafe import escape
+        data_incoming = {
+            "root": h.url_for("/"),
+            "visualization_id": visualization_id,
+            "visualization_name": visualization_name,
+            "visualization_plugin": visualization_plugin,
+            "visualization_title": escape(title),
+            "visualization_config": config }
     %>
 
     ## Create a container with default identifier `app`