From c6a11dd50ad37595d2fec70705424752d804b52e Mon Sep 17 00:00:00 2001 From: Oliver Eyton-Williams Date: Thu, 31 Oct 2019 12:26:10 +0000 Subject: [PATCH] fix: escape HTML entities in code editor log (#37601) --- .../src/templates/Challenges/redux/execute-challenge-saga.js | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/client/src/templates/Challenges/redux/execute-challenge-saga.js b/client/src/templates/Challenges/redux/execute-challenge-saga.js index e4ab1d5375..db58d8b63c 100644 --- a/client/src/templates/Challenges/redux/execute-challenge-saga.js +++ b/client/src/templates/Challenges/redux/execute-challenge-saga.js @@ -9,6 +9,7 @@ import { getContext } from 'redux-saga/effects'; import { channel } from 'redux-saga'; +import escape from 'lodash/escape'; import { challengeDataSelector, @@ -73,7 +74,7 @@ export function* executeChallengeSaga() { function* logToConsole(channel) { yield takeEvery(channel, function*(args) { - yield put(updateLogs(args)); + yield put(updateLogs(escape(args))); }); }