Comment 7 for bug 1902965

Hi, I have a bootstrap fix for Jeff's branch at security/user/jboyer/lp1902965_marc_xss ... but I've been stuck trying to figure out how to correct the instance I've noticed in the 245a in the 3.6+ Angular staff catalog.

To see what I mean, edit a record to add <i>Yo, Italics!</i> to a 245 a, then load the record by id. You should see that message in italics in the Record Summary at the top of the page. If you instead *search* for the record (by title, author, whatever) and click it in the search results, you *will not* see the title italicized. It will instead show the literal <i> </i> tags in the summary as you would expect. I believe this is because Display Fields are used when performing searches and not when loading a record directly but I'm not having a lot of luck tracking down where the difference is in the client.

I think this is one of the few remaining situations like this in the client but this feels like a game of whack-a-mole that we're likely to eventually lose. I wonder if we may have to eventually alter the way things work at a lower level to really put an end to this.