docs: escape HTML in component prop descriptions

This commit is contained in:
Eric Liu 2020-11-27 04:28:27 -08:00
commit 04d35f51f1

View file

@ -138,7 +138,10 @@
{#if prop.description}
{#each prop.description.split('\n') as line}
<div class="description">
{@html line.replace(/`(.*?)`/g, '<code>$1</code>')}.
{@html line
.replace(/\</g, '&lt;')
.replace(/\>/g, '&gt;')
.replace(/`(.*?)`/g, '<code>$1</code>')}.
</div>
{/each}
{:else}