diff --git a/app/Http/Controllers/ConversationsController.php b/app/Http/Controllers/ConversationsController.php index 3d0917e5c..14d92df92 100755 --- a/app/Http/Controllers/ConversationsController.php +++ b/app/Http/Controllers/ConversationsController.php @@ -1960,6 +1960,7 @@ public function ajax(Request $request) 'thread' => $thread ]; $response['html'] = \View::make('conversations/partials/edit_thread')->with($data)->render(); + $response['html'] = \Helper::stripDangerousTags($response['html']); $response['status'] = 'success'; }