🔥 （#412）

everfu · Nov 8, 2024 · 4e63835 · 4e63835
1 parent b9ae94b
commit 4e63835
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 2 deletions.
diff --git a/source/js/main.js b/source/js/main.js
@@ -552,7 +552,7 @@ const addHighlight = () => {
   if ($isPrismjs) {
     $syntaxHighlight.forEach(item => {
       const langName = item.getAttribute('data-language') || 'Code'
-      const highlightLangEle = `<div class="code-lang">${langName}</div>`
+      const highlightLangEle = `<div class="code-lang">${utils.escapeHtml(langName)}</div>`
       utils.wrap(item, 'figure', {
         class: 'highlight'
       })
@@ -562,7 +562,7 @@ const addHighlight = () => {
     $syntaxHighlight.forEach(item => {
       let langName = item.getAttribute('class').split(' ')[1]
       if (langName === 'plain' || langName === undefined) langName = 'Code'
-      const highlightLangEle = `<div class="code-lang">${langName}</div>`
+      const highlightLangEle = `<div class="code-lang">${utils.escapeHtml(langName)}</div>`
       createEle(highlightLangEle, item, 'hl')
     })
   }

diff --git a/source/js/utils.js b/source/js/utils.js
@@ -196,6 +196,16 @@
 
             observerItem ? observerItem.observe(dom) : callback();
         },
+        escapeHtml: function (unsafe) {
+            return unsafe.replace(/[&<"']/g, function (m) {
+              return {
+                '&': '&amp;',
+                '<': '&lt;',
+                '"': '&quot;',
+                "'": '&#039;'
+              }[m];
+            });
+        }
     }
     window.utils = {...window.utils, ...utilsFn};
 })()