Fix unescaped HTML in type-in-the-answer (#2658)

2023-09-14 04:34:22 +03:00 · 2023-09-14 04:34:22 +03:00 · e2603a73f5
commit e2603a73f5
parent 120c6e165c
1 changed files with 1 additions and 1 deletions
--- a/rslib/src/typeanswer.rs
+++ b/rslib/src/typeanswer.rs
@ -92,7 +92,7 @@ impl DiffContext {
        format!(
            "<code id=typeans>{}</code>",
            if self.provided.is_empty() {
-                self.expected.iter().collect()
+                htmlescape::encode_minimal(&self.expected.iter().collect::<String>())
            } else if self.provided == self.expected {
                provided
            } else {