Breizh/haste-server
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Escape document when using the txt extension

Browse source
This commit is contained in:
Michael Macias 2012-01-08 23:44:04 -06:00
parent cc65e98940
commit d87c3b7d61
2 changed files with 11 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
static/application.js
View file

@ -4,6 +4,15 @@ var haste_document = function() {
this.locked = false; this.locked = false;
}; };
// Escapes HTML tag characters
haste_document.prototype.htmlEscape = function(s) {
return s
.replace(/&/g, '&')
.replace(/>/g, '>')
.replace(/</g, '&lt;')
.replace(/"/g, '&quot;');
};
// Get this document from the server and lock it here // Get this document from the server and lock it here
haste_document.prototype.load = function(key, callback, lang) { haste_document.prototype.load = function(key, callback, lang) {
var _this = this; var _this = this;
@ -17,7 +26,7 @@ haste_document.prototype.load = function(key, callback, lang) {
try { try {
var high; var high;
if (lang === 'txt') { if (lang === 'txt') {
high = { value: res.data }; high = { value: _this.htmlEscape(res.data) };
} }
else if (lang) { else if (lang) {
high = hljs.highlight(lang, res.data); high = hljs.highlight(lang, res.data);

2
static/application.min.js vendored
View file

File diff suppressed because one or more lines are too long