feat: escape paste data

WhateverLabs · Dec 13, 2023 · a09d9ab · a09d9ab
1 parent f262fb0
commit a09d9ab
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/routes/v/PasteViewer.svelte b/src/routes/v/PasteViewer.svelte
@@ -10,7 +10,7 @@
 	export let expiresAt: string;
 	export let oneView: boolean;
 
-	import { Marked } from '@ts-stack/markdown';
+	import { Marked, escape } from '@ts-stack/markdown';
 	import { onMount } from 'svelte';
 
 	let enableFormatting = true;
@@ -20,7 +20,7 @@
 	onMount(() => {
 		const marked = Marked.setOptions({});
 
-		html = marked.parse(body);
+		html = marked.parse(escape(body));
 	});
 
 	const iframeCSP = "default-src 'self'; style-src 'unsafe-inline';";