From d79a6d7e195f82af552e64fd8bd71754a7e6e9ff Mon Sep 17 00:00:00 2001
From: Rohan Mitchell <rohan@rohanmitchell.com>
Date: Thu, 11 Feb 2016 11:24:42 +1100
Subject: [PATCH] Escape HTML entities in JSON

---
 config/application.rb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/config/application.rb b/config/application.rb
index ba75a097ec..1fb6c88bbf 100644
--- a/config/application.rb
+++ b/config/application.rb
@@ -102,5 +102,6 @@ module Openfoodnetwork
     config.assets.precompile += ['search/all.css', 'search/*.js']
     config.assets.precompile += ['shared/*']
 
+    config.active_support.escape_html_entities_in_json = true
   end
 end