app/helpers/decidim/meetings/map_helper.rb in decidim-meetings-0.21.0 vs app/helpers/decidim/meetings/map_helper.rb in decidim-meetings-0.22.0

@@ -2,10 +2,11 @@
 
 module Decidim
   module Meetings
     # This helper include some methods for rendering meetings dynamic maps.
     module MapHelper
+      include Decidim::SanitizeHelper
       # Serialize a collection of geocoded meetings to be used by the dynamic map component
       #
       # meetings - A collection of meetings
       def meetings_data_for_map(meetings)
         geocoded_meetings = meetings.select(&:geocoded?)
@@ -16,10 +17,10 @@
                                                                startTimeMonth: l(meeting.start_time, format: "%B"),
                                                                startTimeYear: l(meeting.start_time, format: "%Y"),
                                                                startTime: "#{meeting.start_time.strftime("%H:%M")} - #{meeting.end_time.strftime("%H:%M")}",
                                                                icon: icon("meetings", width: 40, height: 70, remove_icon_class: true),
                                                                location: translated_attribute(meeting.location),
-                                                               locationHints: translated_attribute(meeting.location_hints),
+                                                               locationHints: decidim_html_escape(translated_attribute(meeting.location_hints)),
                                                                link: resource_locator(meeting).path)
         end
       end
     end
   end