From 8998a54ce69f8944ba9a0c97f5d0a26896e79f99 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?R=C3=A9gis=20Hanol?= <regis@hanol.fr>
Date: Mon, 27 Jul 2015 12:50:50 +0200
Subject: [PATCH] FIX: make sure we escape titles in user streams

---
 app/assets/javascripts/discourse/models/user-stream.js.es6 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/assets/javascripts/discourse/models/user-stream.js.es6 b/app/assets/javascripts/discourse/models/user-stream.js.es6
index ac3883ba3..1870d484d 100644
--- a/app/assets/javascripts/discourse/models/user-stream.js.es6
+++ b/app/assets/javascripts/discourse/models/user-stream.js.es6
@@ -68,7 +68,7 @@ export default RestModel.extend({
       if (result && result.user_actions) {
         const copy = Em.A();
         result.user_actions.forEach(function(action) {
-          action.title = Discourse.Emoji.unescape(action.title);
+          action.title = Discourse.Emoji.unescape(Handlebars.Utils.escapeExpression(action.title));
           copy.pushObject(Discourse.UserAction.create(action));
         });