From 7c20714ae7f376dc118f7333fbd7ed45dffa94d4 Mon Sep 17 00:00:00 2001
From: Matt Hill <matt.hill@bigcommerce.com>
Date: Fri, 17 Apr 2020 15:39:35 +1000
Subject: [PATCH] fix(checkout): CHECKOUT-4828 Special characters to render
 properly on the cart modal pop up

---
 templates/components/cart/content.html          | 2 +-
 templates/components/cart/preview.html          | 2 +-
 templates/components/products/product-view.html | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/templates/components/cart/content.html b/templates/components/cart/content.html
index 2f4b1dcc12..7959c87782 100644
--- a/templates/components/cart/content.html
+++ b/templates/components/cart/content.html
@@ -40,7 +40,7 @@ <h4 class="cart-item-name"><a href="{{url}}">{{name}}</a></h4>
                                     {{#if is_file}}
                                         <a href="/viewfile.php?attributeId={{../id}}&cartitem={{../../id}}">{{value}}</a>
                                     {{else}}
-                                        {{value}}
+                                        {{{ sanitize value}}}
                                     {{/if}}
                                 </dd>
                             {{/each}}
diff --git a/templates/components/cart/preview.html b/templates/components/cart/preview.html
index eee1a4fef9..dac2b6ae1a 100644
--- a/templates/components/cart/preview.html
+++ b/templates/components/cart/preview.html
@@ -88,7 +88,7 @@ <h4 class="productView-title">
                                 {{name}}
                             </dt>
                             <dd class="productView-info-value">
-                                {{value}}
+                                {{{ sanitize value}}}
                             </dd>
                         </dl>
                     {{/each}}
diff --git a/templates/components/products/product-view.html b/templates/components/products/product-view.html
index 504f5df65d..fe91c3ba9e 100644
--- a/templates/components/products/product-view.html
+++ b/templates/components/products/product-view.html
@@ -146,7 +146,7 @@ <h2 class="productView-brand"{{#if schema}} itemprop="brand" itemscope itemtype=
                 {{#if theme_settings.show_custom_fields_tabs '!==' true}}
                     {{#each product.custom_fields}}
                         <dt class="productView-info-name">{{name}}:</dt>
-                        <dd class="productView-info-value">{{{value}}}</dd>
+                        <dd class="productView-info-value">{{{ sanitize value}}}</dd>
                     {{/each}}
                 {{/if}}
             </dl>