Close #1451: render safe HTML in table output

client/app/components/dynamic-table/dynamic-table.html

@@ -10,8 +10,7 @@
     </thead>
     <tbody>
     <tr ng-repeat="row in $ctrl.rows">
-      <td ng-repeat="column in $ctrl.columns">
-        {{column.formatFunction(row[column.name])}}
+      <td ng-repeat="column in $ctrl.columns" ng-bind-html="$ctrl.sanitize(column.formatFunction(row[column.name]))">
       </td>
     </tr>
     </tbody>

client/app/components/dynamic-table/index.js

@@ -2,7 +2,9 @@ import { sortBy } from 'underscore';
 import template from './dynamic-table.html';
 import './dynamic-table.css';
 
-function DynamicTable() {
+function DynamicTable($sanitize) {
+  'ngInject';
+
   this.itemsPerPage = this.count = 15;
   this.page = 1;
   this.rowsCount = 0;
@@ -41,6 +43,10 @@ function DynamicTable() {
     }
   };
 
+  this.sanitize = (value) => {
+    return $sanitize(value);
+  }
+
   this.sortIcon = (column) => {
     if (column !== this.orderByField) {
       return null;