Merge pull request #3763 from overleaf/jpa-xss-7

[views] mitigate XSS on new subscription page

GitOrigin-RevId: 74baa58527aa9b2f9e434c280885b627f73898b6

services/web/frontend/js/main/new-subscription.js

@@ -11,8 +11,14 @@ export default App.controller('NewSubscriptionController', function(
   $scope,
   MultiCurrencyPricing,
   $http,
+  $location,
   eventTracking
 ) {
+  window.couponCode = $location.search().cc || ''
+  window.plan_code = $location.search().planCode || ''
+  window.ITMCampaign = $location.search().itm_campaign || ''
+  window.ITMContent = $location.search().itm_content || ''
+
   if (typeof recurly === 'undefined' || !recurly) {
     $scope.recurlyLoadError = true
     return