[ZEPPELIN-4333] Escape popup dialog title and message

• Type: Task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.8.1
• Fix Version/s: 0.8.2
• Component/s: front-end
• Assignee: Lee Moon Soo
• Reporter: Lee Moon Soo
• Created: 17/Sep/19 17:41
• Updated: 29/Sep/19 08:40
• Resolved: 19/Sep/19 17:04

Description

There're couple of places we're not escaping contents of popup dialog (title, message)

Issue Links

• is duplicated by: ZEPPELIN-4335 Deleting a Notebook is vulnerable to XSS attach
• links to: GitHub Pull Request #3449