diff --git a/assets/js/sections/bandmap_list.js b/assets/js/sections/bandmap_list.js index f34400342..94b01dbe5 100644 --- a/assets/js/sections/bandmap_list.js +++ b/assets/js/sections/bandmap_list.js @@ -1167,10 +1167,19 @@ $(function() { // Special column: combine medals, LoTW and activity badges let flags_column = medals + lotw_badge + activity_flags; - data[0].push(flags_column); // Message column - data[0].push(single.message || ''); + data[0].push(flags_column); - // Debug: Validate data array has exactly 16 columns + // Message column: add tooltip with full message text + let message = single.message || ''; + let messageDisplay = message; + if (message) { + // Escape HTML for tooltip to prevent XSS + let messageTooltip = message.replace(/&/g, '&').replace(//g, '>').replace(/"/g, '"').replace(/'/g, '''); + messageDisplay = '' + message + ''; + } + data[0].push(messageDisplay); + + // Debug: Validate data array has exactly 16 columns if (data[0].length !== 16) { console.error('INVALID DATA ARRAY LENGTH:', data[0].length, 'Expected: 16'); console.error('Spot:', single.spotted, 'Frequency:', single.frequency);