fix(ui): escape organization/title properties

Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>

Author: ChristophWurst

package-lock.json

@@ -60,6 +60,7 @@
     "debounce": "^1.2.1",
     "downloadjs": "^1.4.7",
     "ical.js": "^1.5.0",
+    "lodash": "^4.17.21",
     "moment": "^2.29.4",
     "p-limit": "^4.0.0",
     "qr-image": "^3.2.0",

package.json

@@ -369,6 +369,7 @@
 </template>
 
 <script>
+import escape from 'lodash/fp/escape.js'
 import { showError } from '@nextcloud/dialogs'
 
 import { stringify } from 'ical.js'
@@ -717,9 +718,9 @@ export default {
 					organization,
 				})
 			} else if (title) {
-				return title
+				return escape(title)
 			} else if (organization) {
-				return organization
+				return escape(organization)
 			}
 
 			return ''