[bug] Double Encoding in Admin Dashboard Device Models segment

[momothefox]

Clicking on dashboard Device Models pie chart segments generates incorrect filter URLs when labels contain special characters such as "&".

Steps To Reproduce
Device model:
Dongwon T&I DW02-412H (128M)

In Admin dashboard Network Administration
Device Models chart
clicking on this device filter

Generated URL:
/admin/config/device/?model__exact=Dongwon+T%26amp%3BI+DW02-412H+%28128M%29

which is double encoded

Expected behavior
Correct URL:
/admin/config/device/?model__exact=Dongwon%20T%26I%20DW02-412H%20%28128M%29

System type chart generates correct html

System Information:

• OS: [Ubuntu 22 LTS]
• Python Version: [3.10.12]
• Django Version: [Django 5.2.11]
• Browser and Browser Version: [Chrome v147.0.7727.57]

I have changed this

openwisp-utils/openwisp_utils/admin_theme/dashboard.py

Line 221 in f6305c4

label = html.escape(label)

to label = (label)

works for me, i do not know if this is the correct approach or not.

[nemesifier]

@momothefox the solution you used is unsecure as it exposes your UI to XSS attacks. We'll look for a secure solution.

[openwisp-companion]

Hi @BHARATH0153 👋,

Thank you for opening PR #666 to address this issue!

GitHub did not allow the bot to assign this issue to you automatically, because you are not yet an organization member and have not previously commented on this issue.

To get assigned, please comment @openwisp-companion assign on this issue. Your comment satisfies GitHub's requirement and the bot will then assign the issue to you.