Fix simple glossary HTML not being escaped (#1788)

1 files changed, 1 insertions, 1 deletions

diff --git a/ext/js/templates/template-renderer.js b/ext/js/templates/template-renderer.js
index 928ec3c4..8c62a3cd 100644
--- a/ext/js/templates/template-renderer.js
+++ b/ext/js/templates/template-renderer.js
@@ -611,7 +611,7 @@ class TemplateRenderer {
     _formatGlossary(context, dictionary, options) {
         const data = options.data.root;
         const content = options.fn(context);
-        if (typeof content === 'string') { return this._stringToMultiLineHtml(content); }
+        if (typeof content === 'string') { return this._stringToMultiLineHtml(this._escape(content)); }
         if (!(typeof content === 'object' && content !== null)) { return ''; }
         switch (content.type) {
             case 'image': return this._formatGlossaryImage(content, dictionary, data);