From 70b075a1d54609aaedc546b3eb3d566c8ed35f2b Mon Sep 17 00:00:00 2001
From: Graham Herceg <gherceg@dimagi.com>
Date: Wed, 15 Nov 2023 15:33:36 -0500
Subject: [PATCH] vellum:9d2f2db789028bd2901ddfdc676c0b28879165a4

---
 .../static/app_manager/js/vellum/manifest.txt          |  2 +-
 .../app_manager/js/vellum/src/main-components.js       | 10 ++++++----
 .../static/app_manager/js/vellum/version.txt           |  2 +-
 3 files changed, 8 insertions(+), 6 deletions(-)

diff --git a/corehq/apps/app_manager/static/app_manager/js/vellum/manifest.txt b/corehq/apps/app_manager/static/app_manager/js/vellum/manifest.txt
index c1e2d819bbe6..fc83a92e881f 100644
--- a/corehq/apps/app_manager/static/app_manager/js/vellum/manifest.txt
+++ b/corehq/apps/app_manager/static/app_manager/js/vellum/manifest.txt
@@ -1007,4 +1007,4 @@
 │  ├─ buffer-crc32@~0.2.3
 │  └─ fd-slicer@~1.1.0
 └─ yocto-queue@0.1.0
-Done in 0.14s.
+Done in 0.15s.
diff --git a/corehq/apps/app_manager/static/app_manager/js/vellum/src/main-components.js b/corehq/apps/app_manager/static/app_manager/js/vellum/src/main-components.js
index 0fa1d4c43f25..8b00efeac17a 100644
--- a/corehq/apps/app_manager/static/app_manager/js/vellum/src/main-components.js
+++ b/corehq/apps/app_manager/static/app_manager/js/vellum/src/main-components.js
@@ -28684,9 +28684,11 @@ define('vellum/tsv',[
 });
 
 define('vellum/exporter',[
-    'vellum/tsv'
+    'vellum/tsv',
+    'vellum/richText'
 ], function (
-    tsv
+    tsv,
+    richText
 ) {
     // todo: abstract out IText stuff into part of the plugin interface
     var generateExportTSV = function (form) {
@@ -28775,7 +28777,7 @@ define('vellum/exporter',[
 
             row["Hint Text"] = defaultOrNothing(mug.p.hintItext, defaultLanguage, 'default');
             row["Help Text"] = defaultOrNothing(mug.p.helpItext, defaultLanguage, 'default');
-            row.Comment = mug.p.comment;
+            row.Comment = richText.sanitizeInput(mug.p.comment);
 
             // make sure there aren't any null values
             for (var prop in row) {
@@ -48665,7 +48667,7 @@ define('vellum/core',[
             form = this.data.core.form,
             mugs = multiselect ? mug : [mug],
             $baseToolbar = $(question_toolbar({
-                comment: multiselect ? '' : mug.p.comment,
+                comment: multiselect ? '' : richText.sanitizeInput(mug.p.comment),
                 isDeleteable: mugs && mugs.length && _.every(mugs, function (mug) {
                     return _this.isMugRemoveable(mug, mug.hashtagPath);
                 }),
diff --git a/corehq/apps/app_manager/static/app_manager/js/vellum/version.txt b/corehq/apps/app_manager/static/app_manager/js/vellum/version.txt
index c15bca43149e..12cf6d4328a5 100644
--- a/corehq/apps/app_manager/static/app_manager/js/vellum/version.txt
+++ b/corehq/apps/app_manager/static/app_manager/js/vellum/version.txt
@@ -1 +1 @@
-9f539058684ab5d834fcad120e5b41c9550536b6
+9d2f2db789028bd2901ddfdc676c0b28879165a4