From a099876088ca923b12571749c6118bb8ffd764ea Mon Sep 17 00:00:00 2001
From: zadam <zadam.apps@gmail.com>
Date: Sun, 26 Mar 2023 20:50:37 +0200
Subject: [PATCH] fix escaping in sql console results

---
 package-lock.json                    | 5 ++---
 src/public/app/widgets/sql_result.js | 4 ++--
 2 files changed, 4 insertions(+), 5 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index dbd019d3b..8117a4a56 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,11 @@
 {
   "name": "trilium",
-  "version": "0.59.1",
+  "version": "0.59.2",
   "lockfileVersion": 2,
   "requires": true,
   "packages": {
     "": {
-      "name": "trilium",
-      "version": "0.59.1",
+      "version": "0.59.2",
       "hasInstallScript": true,
       "license": "AGPL-3.0-only",
       "dependencies": {
diff --git a/src/public/app/widgets/sql_result.js b/src/public/app/widgets/sql_result.js
index 142dc79e3..4224e714b 100644
--- a/src/public/app/widgets/sql_result.js
+++ b/src/public/app/widgets/sql_result.js
@@ -60,7 +60,7 @@ export default class SqlResultWidget extends NoteContextAwareWidget {
             const $row = $("<tr>");
 
             for (const key in result) {
-                $row.append($("<th>").html(key));
+                $row.append($("<th>").text(key));
             }
 
             $table.append($row);
@@ -69,7 +69,7 @@ export default class SqlResultWidget extends NoteContextAwareWidget {
                 const $row = $("<tr>");
 
                 for (const key in result) {
-                    $row.append($("<td>").html(result[key]));
+                    $row.append($("<td>").text(result[key]));
                 }
 
                 $table.append($row);