From 4bbb3bde74b64da390b2df108bbf42b4639bc971 Mon Sep 17 00:00:00 2001
From: GoEdgeLab <goedgecloud@gmail.com>
Date: Mon, 12 Jul 2021 17:35:33 +0800
Subject: [PATCH] =?UTF-8?q?=E4=BF=AE=E5=A4=8D<keyword>=E7=BB=84=E4=BB=B6?=
 =?UTF-8?q?=E7=9A=84=E5=AE=89=E5=85=A8=E9=97=AE=E9=A2=98?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 web/public/js/components/common/keyword.js | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/web/public/js/components/common/keyword.js b/web/public/js/components/common/keyword.js
index a71ca05a..c19a487d 100644
--- a/web/public/js/components/common/keyword.js
+++ b/web/public/js/components/common/keyword.js
@@ -13,7 +13,7 @@ Vue.component("keyword", {
 		}
 
 		let slot = this.$slots["default"][0]
-		let text = slot.text
+		let text = this.encodeHTML(slot.text)
 		if (word.length > 0) {
 			text = text.replace(new RegExp("(" + word + ")", "ig"), "<span style=\"border: 1px #ccc dashed; color: #ef4d58\">$1</span>")
 		}
@@ -23,5 +23,13 @@ Vue.component("keyword", {
 			text: text
 		}
 	},
+	methods: {
+		encodeHTML: function (s) {
+			s = s.replace("&", "&amp;")
+			s = s.replace("<", "&lt;")
+			s = s.replace(">", "&gt;")
+			return s
+		}
+	},
 	template: `<span><span style="display: none"><slot></slot></span><span v-html="text"></span></span>`
 })
\ No newline at end of file