Escape html chars in Inject/Debug and Info pane

This commit is contained in:
Nick O'Leary
2014-04-09 14:50:53 +01:00
parent 8a646f73b3
commit 10d9dee4aa
3 changed files with 5 additions and 4 deletions

View File

@@ -53,6 +53,7 @@ RED.sidebar.info = function() {
if (val.length > 30) {
val = val.substring(0,30)+" ...";
}
val = val.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;");
} else if (type === "number") {
val = val.toString();
} else if ($.isArray(val)) {