Playground: html escape the stdout

crystal-lang · Nov 18, 2016 · d847b69 · d847b69
1 parent 6d3b5a4
commit d847b69
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/compiler/crystal/tools/playground/public/session.js b/src/compiler/crystal/tools/playground/public/session.js
@@ -555,7 +555,7 @@ Playground.Session = function(options) {
   //stdout
   this._appendStdout = function(content) {
     this.stdoutRawContent += content;
-    this.stdout[0].innerHTML = ansi_up.ansi_to_html(this.stdoutRawContent, {"use_classes": true});
+    this.stdout[0].innerHTML = ansi_up.ansi_to_html(ansi_up.escape_for_html(this.stdoutRawContent), {"use_classes": true});
   }.bind(this);
 
   this._clearStdout = function() {