From 18b2f60b84c1201cfa7c7ba77db3155d4a3ec408 Mon Sep 17 00:00:00 2001
From: NGPixel <github@ngpixel.com>
Date: Tue, 14 Jan 2020 22:41:26 -0500
Subject: [PATCH] fix: unescaped code in markdown preview panel

---
 client/components/editor/editor-markdown.vue | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/client/components/editor/editor-markdown.vue b/client/components/editor/editor-markdown.vue
index 38134d82..965f618d 100644
--- a/client/components/editor/editor-markdown.vue
+++ b/client/components/editor/editor-markdown.vue
@@ -243,7 +243,7 @@ const md = new MarkdownIt({
   linkify: true,
   typography: true,
   highlight(str, lang) {
-    return `<pre class="line-numbers"><code class="language-${lang}">${str}</code></pre>`
+    return `<pre class="line-numbers"><code class="language-${lang}">${_.escape(str)}</code></pre>`
   }
 })
   .use(mdAttrs, {