From c6a11dd50ad37595d2fec70705424752d804b52e Mon Sep 17 00:00:00 2001
From: Oliver Eyton-Williams <ojeytonwilliams@gmail.com>
Date: Thu, 31 Oct 2019 12:26:10 +0000
Subject: [PATCH] fix: escape HTML entities in code editor log (#37601)

---
 .../src/templates/Challenges/redux/execute-challenge-saga.js   | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/client/src/templates/Challenges/redux/execute-challenge-saga.js b/client/src/templates/Challenges/redux/execute-challenge-saga.js
index e4ab1d5375..db58d8b63c 100644
--- a/client/src/templates/Challenges/redux/execute-challenge-saga.js
+++ b/client/src/templates/Challenges/redux/execute-challenge-saga.js
@@ -9,6 +9,7 @@ import {
   getContext
 } from 'redux-saga/effects';
 import { channel } from 'redux-saga';
+import escape from 'lodash/escape';
 
 import {
   challengeDataSelector,
@@ -73,7 +74,7 @@ export function* executeChallengeSaga() {
 
 function* logToConsole(channel) {
   yield takeEvery(channel, function*(args) {
-    yield put(updateLogs(args));
+    yield put(updateLogs(escape(args)));
   });
 }