From 4b848548ff215f8edb058ab83b24175a019b783b Mon Sep 17 00:00:00 2001
From: Daimona Eaytoy <daimona.wiki@gmail.com>
Date: Fri, 6 Oct 2023 20:14:37 +0200
Subject: [PATCH] SECURITY: Fix XSSs in EmailManager.js

Bug: T348343
Change-Id: I70d71c409193e904684dfb706d424b0a815fa6f6
---
 .../ext.campaignEvents.specialeventdetails/EmailManager.js  | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/resources/ext.campaignEvents.specialeventdetails/EmailManager.js b/resources/ext.campaignEvents.specialeventdetails/EmailManager.js
index ab3c6eb..19a7f0c 100644
--- a/resources/ext.campaignEvents.specialeventdetails/EmailManager.js
+++ b/resources/ext.campaignEvents.specialeventdetails/EmailManager.js
@@ -123,14 +123,14 @@
 		}
 
 		if ( allSelected ) {
-			this.$recipientsListElement.append(
+			this.$recipientsListElement.text(
 				mw.message( 'campaignevents-email-participants-all' ).text() );
 			return;
 		}
 
 		if ( this.recipientsList.length > 1 ) {
 			if ( participantsManager.selectAllParticipantsCheckbox.selected ) {
-				this.$recipientsListElement.append(
+				this.$recipientsListElement.text(
 					mw.message(
 						'campaignevents-email-participants-except-count',
 						mw.language.convertNumber(
@@ -138,7 +138,7 @@
 						) ).text() );
 				return;
 			}
-			this.$recipientsListElement.append(
+			this.$recipientsListElement.text(
 				mw.message(
 					'campaignevents-email-participants-count',
 					mw.language.convertNumber(
-- 
2.34.1

