From 04d35f51f12807e575688e49363d4ff1f6952f1c Mon Sep 17 00:00:00 2001
From: Eric Liu <ericyl.us@gmail.com>
Date: Fri, 27 Nov 2020 04:28:27 -0800
Subject: [PATCH] docs: escape HTML in component prop descriptions

---
 docs/src/components/ComponentApi.svelte | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/docs/src/components/ComponentApi.svelte b/docs/src/components/ComponentApi.svelte
index d3b3376a..75356c97 100644
--- a/docs/src/components/ComponentApi.svelte
+++ b/docs/src/components/ComponentApi.svelte
@@ -138,7 +138,10 @@
               {#if prop.description}
                 {#each prop.description.split('\n') as line}
                   <div class="description">
-                    {@html line.replace(/`(.*?)`/g, '<code>$1</code>')}.
+                    {@html line
+                      .replace(/\</g, '&lt;')
+                      .replace(/\>/g, '&gt;')
+                      .replace(/`(.*?)`/g, '<code>$1</code>')}.
                   </div>
                 {/each}
               {:else}