SECURITY: Escape title after decryption.

SECURITY: Escape title after decryption.

diff --git a/assets/javascripts/discourse/initializers/hook-decrypt-topic.js.es6 b/assets/javascripts/discourse/initializers/hook-decrypt-topic.js.es6
index 63cac0c..a2b7cf1 100644
--- a/assets/javascripts/discourse/initializers/hook-decrypt-topic.js.es6
+++ b/assets/javascripts/discourse/initializers/hook-decrypt-topic.js.es6
@@ -33,7 +33,7 @@ function decryptElements(containerSelector, elementSelector) {
         const $glyph = $(`h1[data-topic-id=${topicId}] .private-message-glyph`);
         if ($glyph.length) {
           $glyph.html(icon);
-          $el.html(title);
+          $el.html(escapeExpression(title));
         } else {
           $el.html(icon + " " + title);
         }

GitHub sha: 66c803ad