Breizh/haste-server
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge pull request #15 from zaeleus/html_escape

Browse source 
Escape document when using the txt extension
This commit is contained in:
John Crepezzi 2012-01-09 20:43:39 -08:00
commit b251978422
2 changed files with 11 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
static/application.js
View file

@ -4,6 +4,15 @@ var haste_document = function() {
this.locked = false; this.locked = false;
}; };
// Escapes HTML tag characters
haste_document.prototype.htmlEscape = function(s) {
return s
.replace(/&/g, '&')
.replace(/>/g, '>')
.replace(/</g, '&lt;')
.replace(/"/g, '&quot;');
};
// Get this document from the server and lock it here // Get this document from the server and lock it here
haste_document.prototype.load = function(key, callback, lang) { haste_document.prototype.load = function(key, callback, lang) {
var _this = this; var _this = this;
@ -17,7 +26,7 @@ haste_document.prototype.load = function(key, callback, lang) {
try { try {
var high; var high;
if (lang === 'txt') { if (lang === 'txt') {
high = { value: res.data }; high = { value: _this.htmlEscape(res.data) };
} }
else if (lang) { else if (lang) {
high = hljs.highlight(lang, res.data); high = hljs.highlight(lang, res.data);

2
static/application.min.js vendored
View file

File diff suppressed because one or more lines are too long