add escaping for syntax blocks

KonnorRogers · Feb 10, 2024 · ae4d046 · ae4d046
1 parent 3f5e5a1
commit ae4d046
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/docs/plugins/builders/inspectors.rb b/docs/plugins/builders/inspectors.rb
@@ -1,3 +1,5 @@
+require "cgi"
+
 class Builders::Inspectors < SiteBuilder
   def build
     inspect_html do |document|
@@ -49,7 +51,7 @@ def syntax_highlight(document)
             <sl-icon class='clipboard__icon--idle' name='clipboard'></sl-icon>
           </clipboard-copy>
 
-          <textarea id='#{id}' hidden>#{text}</textarea>
+          <textarea id='#{id}' hidden>#{CGI.escape_html(text)}</textarea>
         </div>
       HTML