Merge pull request #2049 from jbennie44/W-5234018

W-5234018 - Fix XSS vulnerability in email admin screen

Author: bohawi

.bowerrc

@@ -0,0 +1,3 @@
+{
+  "registry": "https://registry.bower.io"
+}

js/tree.js

@@ -159,7 +159,7 @@
 						.removeClass('hide hidden')// jQuery deprecated hide in 3.0. Use hidden instead. Leaving hide here to support previous markup
 						.removeData('template')
 						.removeAttr('data-template');
-					$entity.find('.tree-' + nodeType + '-name > .tree-label').html(treeNode.text || treeNode.name);
+					$entity.find('.tree-' + nodeType + '-name > .tree-label')[self.options.html ? 'html' : 'text'](treeNode.text || treeNode.name);
 					$entity.data(treeNode);