From 1f7cb5c3ba09e256e592b9e782d69dc081227611 Mon Sep 17 00:00:00 2001
From: David Cormier <david.cormier@savoirfairelinux.com>
Date: Sun, 13 Oct 2013 14:33:09 -0400
Subject: [PATCH] plugins: use  to explicitely trust html

---
 index.html    | 3 ++-
 js/plugins.js | 5 +++--
 2 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/index.html b/index.html
index 49b5e29..ad9a766 100644
--- a/index.html
+++ b/index.html
@@ -123,8 +123,9 @@ $ openssl req -nodes -newkey rsa:2048 -keyout relay.pem -x509 -days 365 -out rel
 
                 <div ng-repeat="metadata in bufferline.metadata">
                   <div ng-show="metadata.visible">
-                    <a ng-click="metadata.visible = false">Hide additional content</a>
                     <div ng-bind-html="metadata.content"></div>
+                    <a ng-click="metadata.visible = false">Hide additional content</a>
+
 
                   </div>
                   <div ng-hide="metadata.visible">
diff --git a/js/plugins.js b/js/plugins.js
index 235a3d0..e11ef1e 100644
--- a/js/plugins.js
+++ b/js/plugins.js
@@ -26,7 +26,7 @@ var Plugin = function(contentForMessage) {
  * to display when messages are received.
  *
  */
-plugins.service('plugins', ['userPlugins', function(userPlugins) {
+plugins.service('plugins', ['userPlugins', '$sce',  function(userPlugins, $sce) {
 
     /*
      * Defines the plugin manager object
@@ -57,7 +57,8 @@ plugins.service('plugins', ['userPlugins', function(userPlugins) {
                 var pluginContent = plugins[i].contentForMessage(message);
                 if (pluginContent) {
                     var pluginContent = {'visible': true, 
-                                         'content': pluginContent }
+                                         'content': $sce.trustAsHtml(pluginContent) }
+
                     content.push(pluginContent);
 
                     if (plugins[i].exclusive) {