From aa113834db3380a871f4a4e4922e717815149163 Mon Sep 17 00:00:00 2001
From: Rob Garrison <wowmotty@gmail.com>
Date: Thu, 15 Mar 2018 09:41:24 -0500
Subject: [PATCH] Filter: Escape quotes in select options. See #1527

---
 js/widgets/widget-filter.js | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/js/widgets/widget-filter.js b/js/widgets/widget-filter.js
index 922b3b45..2b7cedc0 100644
--- a/js/widgets/widget-filter.js
+++ b/js/widgets/widget-filter.js
@@ -1783,13 +1783,13 @@
 						options += '<option';
 						for ( val in option ) {
 							if ( option.hasOwnProperty( val ) && val !== 'text' ) {
-								options += ' ' + val + '="' + option[ val ] + '"';
+								options += ' ' + val + '="' + option[ val ].replace( tsfRegex.quote, '&quot;' ) + '"';
 							}
 						}
 						if ( !option.value ) {
-							options += ' value="' + option.text + '"';
+							options += ' value="' + option.text.replace( tsfRegex.quote, '&quot;' ) + '"';
 						}
-						options += '>' + option.text + '</option>';
+						options += '>' + option.text.replace( tsfRegex.quote, '&quot;' ) + '</option>';
 						// above code is needed in jQuery < v1.8
 
 						// make sure we don't turn an object into a string (objects without a "text" property)