/dispatch/[rz slug] - driver name double encoded in the google map

[engerm]

Description

A driver's name is double HTML Entity encoded.

See screen shot.

Version unknown https://dev.drive.vote

Steps

Create a driver with special characters in the name - e.g. <>"

Create a ride zone and assign driver the recently created driver to it

Navigate to ride zone's dispatch mode

Click on the driver in the map

Actual Results

• The driver's name is double encoded

Expected Results 1) The driver's name would not be double HTML entity encoded 2) The name would be properly encoded as to not permit XSS or Arbitrary HTML Injection

[engerm]

[john]

This is fugly, but only affects users with abusive/silly usernames, so triaging to icebox