From 4a7e37cdc03d2cad8a3984ea796015d27aeef34b Mon Sep 17 00:00:00 2001
From: Simon MacMullen <simon@rabbitmq.com>
Date: Mon, 5 Jan 2015 13:31:58 +0000
Subject: [PATCH] Correctly escape policy names.

---
 deps/rabbitmq_management/priv/www/js/formatters.js | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/deps/rabbitmq_management/priv/www/js/formatters.js b/deps/rabbitmq_management/priv/www/js/formatters.js
index 3a90fe3817..cb4ab80dda 100644
--- a/deps/rabbitmq_management/priv/www/js/formatters.js
+++ b/deps/rabbitmq_management/priv/www/js/formatters.js
@@ -84,8 +84,9 @@ function fmt_features(obj) {
 
 function fmt_policy_short(obj) {
     if (obj.policy != undefined && obj.policy != '') {
-        return '<acronym class="policy" title="Policy: ' + obj.policy +
-            '">' + obj.policy + '</acronym> ';
+        return '<acronym class="policy" title="Policy: ' +
+            fmt_escape_html(obj.policy) + '">' +
+            fmt_escape_html(obj.policy) + '</acronym> ';
     } else {
         return '';
     }