escape html

Author: basarat

dist/main/atom/components/ts-view.js

@@ -4,13 +4,14 @@ var __extends = (this && this.__extends) || function (d, b) {
     function __() { this.constructor = d; }
     d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());
 };
+var escapeHtml = require("escape-html");
 var TsView = (function (_super) {
     __extends(TsView, _super);
     function TsView() {
         _super.apply(this, arguments);
     }
     TsView.prototype.createdCallback = function () {
-        var preview = this.innerText;
+        var preview = escapeHtml(this.innerText);
         this.innerText = "";
         var editorElement = this.editorElement = document.createElement('atom-text-editor');
         editorElement.setAttributeNode(document.createAttribute('gutter-hidden'));
@@ -24,7 +25,7 @@ var TsView = (function (_super) {
         this.appendChild(editorElement);
     };
     TsView.prototype.text = function (text) {
-        this.editor.setText(text);
+        this.editor.setText(escapeHtml(text));
     };
     return TsView;
 }(HTMLElement));

lib/main/atom/components/ts-view.ts

@@ -1,14 +1,16 @@
 // Some docs
 // http://www.html5rocks.com/en/tutorials/webcomponents/customelements/ (look at lifecycle callback methods)
 
+import escapeHtml = require("escape-html");
+
 export class TsView extends HTMLElement {
     editorElement;
     editor;
     createdCallback() {
-        var preview = this.innerText;
+        var preview = escapeHtml(this.innerText);
         this.innerText = "";
 
-        // Based on markdown editor 
+        // Based on markdown editor
         // https://github.com/atom/markdown-preview/blob/2bcbadac3980f1aeb455f7078bd1fdfb4e6fe6b1/lib/renderer.coffee#L111
         var editorElement = this.editorElement = document.createElement('atom-text-editor');
         editorElement.setAttributeNode(document.createAttribute('gutter-hidden'));
@@ -22,11 +24,11 @@ export class TsView extends HTMLElement {
 
         this.appendChild(editorElement);
     }
-    
-    // API 
+
+    // API
     text(text: string) {
-        this.editor.setText(text);
+        this.editor.setText(escapeHtml(text));
     }
 }
 
-(<any>document).registerElement('ts-view', TsView);
+(<any>document).registerElement('ts-view', TsView);