Add sanitization

ytkimirti · Sep 18, 2023 · 9573665 · 9573665
1 parent 3edabe1
commit 9573665
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/index.html b/index.html
@@ -363,6 +363,12 @@
       // Skip it on the first load since it's already saved
       void saveNote();
 
+      // Sanitize html
+      text = text
+        .replace(/&/g, "&amp;")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;");
+
       // Turn urls into links
       const urlRegex = /(https?:\/\/[^\s]+)/g;
       text = text.replace(