broker-grid: esc() now escapes > too (defensive, Cody follow-up) — the reference esc is copied fleet-wide

864b07cebce052bcd2dfa3ab0f2ef5ce83ffec9f · 2026-08-03 09:58:26 -0700 · Steve Abrams

Files touched

M public/broker-grid.html

Diff

commit 864b07cebce052bcd2dfa3ab0f2ef5ce83ffec9f
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Mon Aug 3 09:58:26 2026 -0700

    broker-grid: esc() now escapes > too (defensive, Cody follow-up) — the reference esc is copied fleet-wide
---
 public/broker-grid.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/public/broker-grid.html b/public/broker-grid.html
index b26bd39..f11daf0 100644
--- a/public/broker-grid.html
+++ b/public/broker-grid.html
@@ -120,7 +120,7 @@
 <div id="ov"><div id="modal"><button class="x" aria-label="Close" onclick="document.getElementById('ov').classList.remove('on')">✕</button><div id="mbody"></div></div></div>
 <script>
 const $=s=>document.querySelector(s);
-const esc=s=>(s==null?'':String(s)).replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/"/g,'&quot;');
+const esc=s=>(s==null?'':String(s)).replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;').replace(/"/g,'&quot;');
 const num=n=>(n==null||n==='')?'—':Number(n).toLocaleString();
 const tel=v=>v?`<a href="tel:${esc(v)}">${esc(v)}</a>`:'<span class="miss">—</span>';
 const mail=v=>v?`<a href="mailto:${esc(v)}">${esc(v)}</a>`:'<span class="miss">—</span>';

← 8b81a61 broker-grid: 'Added' (created_at) admin-card column now rend · back to Commercialrealestate · rent-rolls: add density slider (Steve HARD rule: every produ 685b210 →