Properly escape list of messages when creating a new entry

This has been broken since day 1... oops.

Noted by Vik Fearing

1 files changed, 1 insertions, 1 deletions

diff --git a/pgcommitfest/commitfest/static/commitfest/js/commitfest.js b/pgcommitfest/commitfest/static/commitfest/js/commitfest.js
index 69c41ec..2f1edda 100644
--- a/pgcommitfest/commitfest/static/commitfest/js/commitfest.js
+++ b/pgcommitfest/commitfest/static/commitfest/js/commitfest.js
@@ -20,7 +20,7 @@ function findLatestThreads() {
          sel = $('#attachThreadList');
          sel.find('option').remove();
          $.each(data, function(m,i) {
-            sel.append('<option value="' + i.msgid + '">' + i.from + ': ' + i.subj + ' (' + i.date + ')</option>');
+             sel.append($('<option/>').text(i.from + ': ' + i.subj + ' (' + i.date + ')').val(i.msgid));
          });
    }).always(function() {
       $('#attachThreadListWrap').removeClass('loading');