commit e549d270bf784f1e92492e5e1f1a12c1eeaa0b7f
author Scott Baker <smbaker@gmail.com> Wed Apr 01 15:39:34 2015 -0700
committer Scott Baker <smbaker@gmail.com> Wed Apr 01 15:39:34 2015 -0700
tree 3444ff067f89443d096f2e4113156ff7e73fd38e
parent 5ccbff4eb66ec204706a8ec2f6f14c80dd2ecfe6
parent e5aca395c266281fd4dff2bfa4a1c4eed008d959

Merge branch 'master' of github.com:open-cloud/xos

xos/core/xoslib/static/js/xoslib/xosHelper.js

diff --git a/xos/core/xoslib/static/js/xoslib/xosHelper.js b/xos/core/xoslib/static/js/xoslib/xosHelper.js
index 2a4f2a2..cef138f 100644
--- a/xos/core/xoslib/static/js/xoslib/xosHelper.js
+++ b/xos/core/xoslib/static/js/xoslib/xosHelper.js
@@ -1154,3 +1154,11 @@
              '</select>';
     return result;
 }
+
+escapeForFormField = function(s) {
+    if (s===undefined) {
+        return "";
+    } else {
+        return s.replace(/"/g,'&quot;')
+    }
+}

xos/core/xoslib/templates/xosAdmin.html

diff --git a/xos/core/xoslib/templates/xosAdmin.html b/xos/core/xoslib/templates/xosAdmin.html
index aa758ae..9760390 100644
--- a/xos/core/xoslib/templates/xosAdmin.html
+++ b/xos/core/xoslib/templates/xosAdmin.html
@@ -174,7 +174,7 @@
         <% } else if (fieldName=="backend_status") { %>

             <td><%= xosBackendStatusTextTemplate.apply(this, args) %></td>

         <% } else { %>

-            <td><input type="text" name="<%= fieldName %>" value="<%= model.attributes[fieldName] %>"<%= readOnly %>></td>

+            <td><input type="text" name="<%= fieldName %>" value="<%= escapeForFormField(model.attributes[fieldName]) %>"<%= readOnly %>></td>

         <% } %>

         <td  class="xos-help-cell"><%= helpText[fieldName] %></td>

      </tr>