public/code-crispies
2
1
Fork 0
Code Issues Pull Requests Actions Activity

fix: escape HTML tags in lesson validation messages

Browse Source 
Prevent HTML elements like <details>, <option>, <form> from being
rendered as actual elements in hint messages by properly escaping
them with &lt; &gt; and wrapping in <kbd> tags.
This commit is contained in:
Michael Czechowski
2025-12-30 12:25:22 +01:00
parent 2b131d0865
commit 95fdc15342
6 changed files with 15 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
lessons/de/25-html-datalist.json
View File

@@ -31,7 +31,7 @@
{
"type": "element_count",
"value": { "selector": "option", "min": 3 },
"message": "Füge mindestens 3 <option>-Elemente in die Datalist ein"
"message": "Füge mindestens 3 <kbd>&lt;option&gt;</kbd>-Elemente in die <kbd>&lt;datalist&gt;</kbd> ein"
},
{
"type": "element_exists",