bug-fix: escape HTML meta characters in title

This commit is contained in:
Le Tan 2018-05-28 20:35:59 +08:00
parent 4de97522a1
commit b433939ca8
5 changed files with 4 additions and 6 deletions

View File

@ -5,12 +5,13 @@ var nameCounter = 0;
renderer.heading = function(text, level) {
// Use number to avoid issues with Chinese
var escapedText = 'toc_' + nameCounter++;
var textHtml = escapeHtml(text);
toc.push({
level: level,
anchor: escapedText,
title: text
title: textHtml
});
return '<h' + level + ' id="' + escapedText + '">' + text + '</h' + level + '>';
return '<h' + level + ' id="' + escapedText + '">' + textHtml + '</h' + level + '>';
};
// Highlight.js to highlight code block

View File

@ -23,7 +23,7 @@ var parseHeadings = function(html) {
toc.push({
level: level,
anchor: ele.id,
title: ele.innerHTML
title: escapeHtml(ele.textContent)
});
}

View File

@ -89,7 +89,6 @@ pre {
code {
font-family: Consolas, Monaco, Monospace, Courier;
font-size: 16px;
color: #98C379;
word-break: break-all;
}

View File

@ -89,7 +89,6 @@ pre {
code {
font-family: Consolas, Monaco, Monospace, Courier;
font-size: 16px;
color: #8E24AA;
word-break: break-all;
}

View File

@ -90,7 +90,6 @@ pre {
code {
font-family: Consolas, Monaco, Monospace, Courier;
font-size: 16px;
color: #8E24AA;
word-break: break-all;
}