Correctly escape special HTML symbols in tests output

beautifier · May 22, 2014 · 5532b23 · 5532b23
1 parent f61a11b
commit 5532b23
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/index.html b/index.html
@@ -143,7 +143,13 @@
             P_A_C_K_E_R.run_tests(st);
             Urlencoded.run_tests(st);
             MyObfuscate.run_tests(st);
-            var results = st.results_raw().replace(/ /g, '&nbsp;').replace(/\r/g, '·').replace(/\n/g, '<br>');
+            var results = st.results_raw()
+                .replace(/&/g, '&amp;')
+                .replace(/</g, '&lt;')
+                .replace(/>/g, '&gt;')
+                .replace(/ /g, '&nbsp;')
+                .replace(/\r/g, '·')
+                .replace(/\n/g, '<br>');
             $('#testresults').html(results).show();
         }