search

lou / multi-select

A user-friendlier drop-in replacement for the standard select with multiple attribute activated.
loudev.com
MIT License
1.9k stars 437 forks source link

Feature/allow-html-injection #304

Open p1-ra opened 6 years ago

p1-ra commented 6 years ago

Disable HTML escape if configured in the options:

$('#my-select').multiSelect({ 
    escapeHTML: false
});

For security reasons, obv, default behaviour is still the escape of HTML.