fix: encode URLs in json samples linkify (xss)

thanks to @masatokinugawa
Redocly · Apr 27, 2020 · 62c01da · 62c01da
1 parent ffa216e
commit 62c01da
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/utils/jsonToHtml.ts b/src/utils/jsonToHtml.ts
@@ -56,7 +56,7 @@ function valueToHTML(value, maxExpandLevel: number) {
       output +=
         decorateWithSpan('"', 'token string') +
         '<a href="' +
-        value +
+        encodeURI(value) +
         '">' +
         htmlEncode(stringifyStringLiteral(value)) +
         '</a>' +