Escape room topic html

packages/rocketchat-channel-settings/client/views/channelSettings.coffee

@@ -20,7 +20,7 @@ Template.channelSettings.helpers
 	roomName: ->
 		return ChatRoom.findOne(@rid, { fields: { name: 1 }})?.name
 	roomTopic: ->
-		return ChatRoom.findOne(@rid, { fields: { topic: 1 }})?.topic
+		return s.escapeHTML ChatRoom.findOne(@rid, { fields: { topic: 1 }})?.topic
 	archivationState: ->
 		return ChatRoom.findOne(@rid, { fields: { archived: 1 }})?.archived
 	archivationStateDescription: ->

packages/rocketchat-ui/views/app/room.coffee

@@ -48,7 +48,7 @@ Template.room.helpers
 	roomTopic: ->
 		roomData = Session.get('roomData' + this._id)
 		return '' unless roomData
-		return roomData.topic
+		return s.escapeHTML roomData.topic
 
 	roomIcon: ->
 		roomData = Session.get('roomData' + this._id)