No escaping

Author: jwklong

src/extensions/jwPointer/index.js

@@ -13,6 +13,15 @@ function span(text) {
     return el
 }
 
+const escapeHTML = unsafe => {
+    return unsafe
+        .replaceAll("&", "&")
+        .replaceAll("<", "&lt;")
+        .replaceAll(">", "&gt;")
+        .replaceAll('"', "&quot;")
+        .replaceAll("'", "&#039;")
+};
+
 const pointerLimit = Number.MAX_SAFE_INTEGER;
 let currentPointerID = 0;
 
@@ -100,7 +109,7 @@ class PointerType {
                 } else if (this.value instanceof PointerType) {
                     value = span("(Pointer)")
                 } else {
-                    value = this.value.toReporterContent ? this.value.toReporterContent() : span(this.value)
+                    value = this.value.toReporterContent ? this.value.toReporterContent() : span(typeof this.value == "string" ? escapeHTML(this.value) : this.value)
                 }
             } catch (e) {
                 value = span("(Recursive)")