From 9f81f8f97adcb2608ed9d8e140faf07f29e9c3e4 Mon Sep 17 00:00:00 2001
From: sacr3dc0w
Date: Thu, 21 May 2020 09:03:02 -0700
Subject: [PATCH] Account: Product option special characters are not rendered
on invoice, order contents and returns
---
CHANGELOG.md | 1 +
templates/components/account/order-contents.html | 2 +-
templates/components/account/returns-list.html | 2 +-
templates/pages/account/add-return.html | 2 +-
templates/pages/account/orders/invoice.html | 2 +-
5 files changed, 5 insertions(+), 4 deletions(-)
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 698309e588..1bbba6232c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,7 @@
# Changelog
## Draft
+-Account: Product option special characters are not rendered on invoice, order contents and returns [#1681|https://github.com/bigcommerce/cornerstone/pull/1681]
## 4.5.4 (05-13-2020)
-Bump jQuery version, expose jquery globally so it doesn't need to be loaded separately [#1671|https://github.com/bigcommerce/cornerstone/pull/1671]
diff --git a/templates/components/account/order-contents.html b/templates/components/account/order-contents.html
index 45860e53ee..5da01600f2 100644
--- a/templates/components/account/order-contents.html
+++ b/templates/components/account/order-contents.html
@@ -54,7 +54,7 @@ {{brand.name}}
{{#each options}}
- {{name}}:
- - {{value}}
+ - {{{sanitize value}}}
{{/each}}
{{/if}}
diff --git a/templates/components/account/returns-list.html b/templates/components/account/returns-list.html
index b5e70d609a..d2ab2dedec 100644
--- a/templates/components/account/returns-list.html
+++ b/templates/components/account/returns-list.html
@@ -37,7 +37,7 @@ {{lang 'account.returns.list.return_number' id
{{#each product.options}}
- {{name}}:
- - {{value}}
+ - {{{sanitize value}}}
{{/each}}
{{/if}}
diff --git a/templates/pages/account/add-return.html b/templates/pages/account/add-return.html
index 3f9de598b8..4566684b73 100644
--- a/templates/pages/account/add-return.html
+++ b/templates/pages/account/add-return.html
@@ -37,7 +37,7 @@
{{lang 'account.returns.from_order' id=forms.return.
{{#each options}}
- {{name}}:
- - {{value}}
+ - {{{sanitize value}}}
{{/each}}
{{/if}}
diff --git a/templates/pages/account/orders/invoice.html b/templates/pages/account/orders/invoice.html
index 9a4808788c..c004bf6b3f 100644
--- a/templates/pages/account/orders/invoice.html
+++ b/templates/pages/account/orders/invoice.html
@@ -120,7 +120,7 @@
{{lang 'invoice.order_items'}}
{{name}}:
-
{{value}}
+
{{{sanitize value}}}
{{/each}}