public/code-crispies
2
1
Fork 0
Code Issues 7 Pull Requests Actions Activity

fix: escape HTML tags in lesson validation messages

Browse Source 
Prevent HTML elements like <details>, <option>, <form> from being
rendered as actual elements in hint messages by properly escaping
them with &lt; &gt; and wrapping in <kbd> tags.
This commit is contained in:
Michael Czechowski
2025-12-30 12:25:22 +01:00
parent a8db5b69cf
commit 2f2969da11
6 changed files with 15 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
lessons/de/27-html-dialog.json
View File

@@ -36,7 +36,7 @@
{
"type": "element_exists",
"value": "form[method='dialog']",
"message": "Füge ein <form method=\"dialog\"> zum Schließen hinzu"
"message": "Füge ein <kbd>&lt;form method=\"dialog\"&gt;</kbd> zum Schließen hinzu"
},
{
"type": "element_exists",
@@ -70,7 +70,7 @@
{
"type": "element_exists",
"value": "form[method='dialog']",
"message": "Füge ein <form method=\"dialog\"> für die Buttons hinzu"
"message": "Füge ein <kbd>&lt;form method=\"dialog\"&gt;</kbd> für die Buttons hinzu"
},
{
"type": "element_count",