Escape HTML in Show JS output (#69)

paf31 · web-flow · commit a8eca2996bc8 · 2017-02-25T11:57:33.000-08:00
diff --git a/js/index.js b/js/index.js
@@ -368,7 +368,7 @@ $(function() {
           if ($("#showjs").is(":checked")) {
             $('#column2')
               .empty()
-              .append($('<pre>').append($('<code>').append(res.js)));
+              .append($('<pre>').append($('<code>').text(res.js)));
           } else {
             (backend.bundleAndExecute || defaultBundleAndExecute)(res.js, backend);
           }

Original file line number	Diff line number	Diff line change
`@@ -368,7 +368,7 @@ $(function() {`
`368`	`368`	`if ($("#showjs").is(":checked")) {`
`369`	`369`	`$('#column2')`
`370`	`370`	`.empty()`
`371`		`- .append($('<pre>').append($('<code>').append(res.js)));`
	`371`	`+ .append($('<pre>').append($('<code>').text(res.js)));`
`372`	`372`	`} else {`
`373`	`373`	`(backend.bundleAndExecute \|\| defaultBundleAndExecute)(res.js, backend);`
`374`	`374`	`}`