Escape highlighted lines html tags

radicle-dev · Dec 19, 2024 · 3276e5f · 3276e5f
1 parent 4647cea
commit 3276e5f
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/components/Changeset/FileDiff.svelte b/src/components/Changeset/FileDiff.svelte
@@ -4,6 +4,7 @@
   import type { Modification } from "@bindings/diff/Modification";
 
   import File from "@app/components/File.svelte";
+  import { escape } from "lodash";
 
   interface Props {
     filePath: string;
@@ -263,7 +264,7 @@
                       {@html line.highlight.items
                         .map(
                           s =>
-                            `<span class="syntax ${s.style}">${s.item}</span>`,
+                            `<span class="syntax ${s.style}">${escape(s.item)}</span>`,
                         )
                         .join("")}
                     {:else}