From 3276e5f7b5cb5d91def104bfbf7594548e17b05f Mon Sep 17 00:00:00 2001
From: Sebastian Martinez <me@sebastinez.dev>
Date: Tue, 17 Dec 2024 22:44:29 +0100
Subject: [PATCH] Escape highlighted lines html tags

---
 src/components/Changeset/FileDiff.svelte | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/components/Changeset/FileDiff.svelte b/src/components/Changeset/FileDiff.svelte
index 253e34d71..1823f4a74 100644
--- a/src/components/Changeset/FileDiff.svelte
+++ b/src/components/Changeset/FileDiff.svelte
@@ -4,6 +4,7 @@
   import type { Modification } from "@bindings/diff/Modification";
 
   import File from "@app/components/File.svelte";
+  import { escape } from "lodash";
 
   interface Props {
     filePath: string;
@@ -263,7 +264,7 @@
                       {@html line.highlight.items
                         .map(
                           s =>
-                            `<span class="syntax ${s.style}">${s.item}</span>`,
+                            `<span class="syntax ${s.style}">${escape(s.item)}</span>`,
                         )
                         .join("")}
                     {:else}