From 3f904b6a59307f9072822b118a328772121756c0 Mon Sep 17 00:00:00 2001
From: Fabian Homborg <FHomborg@gmail.com>
Date: Mon, 22 Jun 2020 19:50:51 +0200
Subject: [PATCH] webconfig: Replace unsafe binding with filter

ng-bind-html-unsafe was apparently removed.
---
 share/tools/web_config/js/app.js            | 7 +++++++
 share/tools/web_config/partials/prompt.html | 4 ++--
 2 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/share/tools/web_config/js/app.js b/share/tools/web_config/js/app.js
index 4da1e143a..b602a8cd0 100644
--- a/share/tools/web_config/js/app.js
+++ b/share/tools/web_config/js/app.js
@@ -1,5 +1,12 @@
 fishconfig = angular.module("fishconfig", ["filters", "controllers", "ngRoute", "ngSanitize"]);
 
+angular.module('fishconfig')
+    .filter('to_trusted', ['$sce', function($sce){
+        return function(text) {
+            return $sce.trustAsHtml(text);
+        };
+    }]);
+
 fishconfig.config(
     ["$routeProvider", function($routeProvider) {
         $routeProvider
diff --git a/share/tools/web_config/partials/prompt.html b/share/tools/web_config/partials/prompt.html
index 069a3d819..a1a37b0ba 100644
--- a/share/tools/web_config/partials/prompt.html
+++ b/share/tools/web_config/partials/prompt.html
@@ -1,7 +1,7 @@
 <!-- The first 'sample' prompt is the current one; the remainders are samples. This ought to be cleaned up. -->
 <div class="current_prompt" style="min-height: 7.5em">
 	<div class="prompt_demo_choice_label">{{ selectedPrompt.name }}</div>
-	<div ng-bind-html-unsafe='selectedPrompt.demo' class="prompt_demo unbordered"></div>
+	<div ng-bind-html='selectedPrompt.demo | to_trusted' class="prompt_demo unbordered"></div>
 	<div style="position: absolute; right: 5px; bottom: 5px; color:">
 		<span class="save_button"
 			  ng-show="showSaveButton"
@@ -14,7 +14,7 @@
 <div class="prompt_choices_list">
     <div ng-repeat="prompt in samplePrompts">
         <div class="prompt_demo_choice_label">{{ prompt.name }}</div>
-        <div ng-bind-html-unsafe='prompt.demo' class="prompt_demo" ng-click="selectPrompt(prompt)"></div>
+        <div ng-bind-html='prompt.demo | to_trusted' class="prompt_demo" ng-click="selectPrompt(prompt)"></div>
     </div>
 </div>
 </div>