From bac74ec5b004d6ce52e1f1fe3acd863f466a900b Mon Sep 17 00:00:00 2001
From: Tim DiLauro <tdilauro@users.noreply.github.com>
Date: Fri, 11 Jan 2019 11:27:16 -0500
Subject: [PATCH] strip EAD tags out of form values (#29)

---
 public/views/aeon/_aeon_request_action.html.erb | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/public/views/aeon/_aeon_request_action.html.erb b/public/views/aeon/_aeon_request_action.html.erb
index 759a0b3..de9c9d3 100644
--- a/public/views/aeon/_aeon_request_action.html.erb
+++ b/public/views/aeon/_aeon_request_action.html.erb
@@ -14,11 +14,11 @@ mapper = AeonRecordMapper.mapper_for(record)
         <% if name.casecmp('requests').zero? %>
           <% value.each do |request| %>
             <% request.each do |request_param, request_value| %>
-              <input type='hidden' name='<%= request_param %>' value='<%= request_value %>' />
+              <input type='hidden' name='<%= request_param %>' value='<%= strip_tags(request_value.to_s) %>' />
             <% end %>
           <% end %>
         <% else %>
-          <input type='hidden' name='<%= name %>' value='<%= value %>' />
+          <input type='hidden' name='<%= name %>' value='<%= strip_tags(value.to_s) %>' />
         <% end %>
       <% end %>