diff --git a/web/screens/Thread/ThreadCenterPanel/SimpleTextMessage/index.tsx b/web/screens/Thread/ThreadCenterPanel/SimpleTextMessage/index.tsx index abbe6db43..da10300dc 100644 --- a/web/screens/Thread/ThreadCenterPanel/SimpleTextMessage/index.tsx +++ b/web/screens/Thread/ThreadCenterPanel/SimpleTextMessage/index.tsx @@ -53,6 +53,15 @@ const SimpleTextMessage: React.FC = (props) => { const clipboard = useClipboard({ timeout: 1000 }) + function escapeHtml(html: string): string { + return html + .replace(/&/g, '&') + .replace(//g, '>') + .replace(/"/g, '"') + .replace(/'/g, ''') + } + const marked: Marked = new Marked( markedHighlight({ langPrefix: 'hljs', @@ -69,6 +78,9 @@ const SimpleTextMessage: React.FC = (props) => { }), { renderer: { + html: (html: string) => { + return escapeHtml(html) // Escape any HTML + }, link: (href, title, text) => { return Renderer.prototype.link ?.apply(this, [href, title, text])