Escape HTML from test results

This commit is contained in:
Sebastian Serth
2021-02-03 17:00:50 +01:00
parent 3f149aacc0
commit c1f187693a

View File

@ -508,7 +508,7 @@ var CodeOceanEditor = {
const context = `${check_run.file_name}: ${check_run.line}${scope}`; const context = `${check_run.file_name}: ${check_run.line}${scope}`;
const line_link = `<a href='#' data-file='${check_run.file_name}' data-line='${check_run.line}'>${context}</a>`; const line_link = `<a href='#' data-file='${check_run.file_name}' data-line='${check_run.line}'>${context}</a>`;
const message = `${check_run.name}: ${check_run.result} (${line_link})`; const message = `${check_run.name}: ${check_run.result} (${line_link})`;
const sub_text = $.parseHTML(message); const sub_text = document.createTextNode(message);
$(sub_li).append(sub_text).on("click", "a", this.jumpToSourceLine.bind(this)); $(sub_li).append(sub_text).on("click", "a", this.jumpToSourceLine.bind(this));
sub_ul.append(sub_li); sub_ul.append(sub_li);
} }
@ -519,7 +519,7 @@ var CodeOceanEditor = {
} else { } else {
errorMessagesToShow.forEach(function (item) { errorMessagesToShow.forEach(function (item) {
var li = document.createElement("li"); var li = document.createElement("li");
var text = $.parseHTML(item); var text = document.createTextNode(item);
$(li).append(text); $(li).append(text);
ul.append(li); ul.append(li);
}) })