{"action":"opened","issue":{"url":"https://api.github.com/repos/driftyco/ionic/issues/4707","labels_url":"https://api.github.com/repos/driftyco/ionic/issues/4707/labels{/name}","comments_url":"https://api.github.com/repos/driftyco/ionic/issues/4707/comments","events_url":"https://api.github.com/repos/driftyco/ionic/issues/4707/events","html_url":"https://github.com/driftyco/ionic/issues/4707","id":120308436,"number":4707,"title":"$ionicPopup.prompt() broken if \"quotes\" used in inputPlaceholder or defaultText","user":{"login":"gregallensworth","id":3117633,"avatar_url":"https://avatars.githubusercontent.com/u/3117633?v=3","gravatar_id":"","url":"https://api.github.com/users/gregallensworth","html_url":"https://github.com/gregallensworth","followers_url":"https://api.github.com/users/gregallensworth/followers","following_url":"https://api.github.com/users/gregallensworth/following{/other_user}","gists_url":"https://api.github.com/users/gregallensworth/gists{/gist_id}","starred_url":"https://api.github.com/users/gregallensworth/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gregallensworth/subscriptions","organizations_url":"https://api.github.com/users/gregallensworth/orgs","repos_url":"https://api.github.com/users/gregallensworth/repos","events_url":"https://api.github.com/users/gregallensworth/events{/privacy}","received_events_url":"https://api.github.com/users/gregallensworth/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-12-04T00:57:23Z","updated_at":"2015-12-04T00:57:23Z","closed_at":null,"body":"$ionicPopup.prompt() supports the *inputPlaceholder* option. This is not escaped, but used as-provided when passed to popup.js showPrompt()\r\n\r\nUse of quotes will cause invalid HTML to be generated, causing at minimum the placeholder to be truncated, but potentially other strangeness, e.g. if the input contains a > character as well, it could terminate the <INPUT> tag and cause other misbehavior.\r\n\r\nExample:\r\n\r\n   $ionicPopup.prompt({\r\n      title: 'Three Words Below?',\r\n      inputPlaceholder: 'your \"favorite\" ><b>here',\r\n   });\r\n\r\nImplement check to escape these properly, since they are being placed inside an attribute."}}