diff --git a/app/assets/javascripts/discourse/views/post_view.js b/app/assets/javascripts/discourse/views/post_view.js index 087ebe3c9..0eb45c93d 100644 --- a/app/assets/javascripts/discourse/views/post_view.js +++ b/app/assets/javascripts/discourse/views/post_view.js @@ -131,7 +131,9 @@ Discourse.PostView = Discourse.GroupedView.extend(Ember.Evented, { topicId = parseInt(topicId, 10); Discourse.ajax("/posts/by_number/" + topicId + "/" + postId).then(function (result) { - var parsed = $(result.cooked); + // slightly double escape the cooked html to prevent jQuery from unescaping it + var escaped = result.cooked.replace("&", "&"); + var parsed = $(escaped); parsed.replaceText(originalText, "" + originalText + ""); $blockQuote.showHtml(parsed, 'fast', finished); });