public/code-crispies
2
1
Fork 0
Code Issues 7 Pull Requests Actions Activity

fix: escape HTML tags in lesson validation messages

Browse Source 
Prevent HTML elements like <details>, <option>, <form> from being
rendered as actual elements in hint messages by properly escaping
them with &lt; &gt; and wrapping in <kbd> tags.
This commit is contained in:
Michael Czechowski
2025-12-30 12:25:22 +01:00
parent a8db5b69cf
commit 2f2969da11
6 changed files with 15 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
lessons/25-html-datalist.json
View File

@@ -31,7 +31,7 @@
{
"type": "element_count",
"value": { "selector": "option", "min": 3 },
"message": "Add at least 3 <option> elements inside datalist"
"message": "Add at least 3 <kbd>&lt;option&gt;</kbd> elements inside <kbd>&lt;datalist&gt;</kbd>"
},
{
"type": "element_exists",