From 197fcd24c3bfe996cd99453430b96f963fdc13d0 Mon Sep 17 00:00:00 2001
From: chaideqing <chaideqing@easycorp.ltd>
Date: Wed, 16 Nov 2022 11:10:20 +0800
Subject: [PATCH 1/2] * Fix feedback #1441.

---
 module/doc/view/content.html.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/module/doc/view/content.html.php b/module/doc/view/content.html.php
index 4a8670fe38..e0bf9ba33c 100644
--- a/module/doc/view/content.html.php
+++ b/module/doc/view/content.html.php
@@ -291,7 +291,7 @@
 <?php if($doc->contentType == 'markdown'):?>
 <?php css::import($jsRoot . "markdown/simplemde.min.css");?>
 <?php js::import($jsRoot . 'markdown/simplemde.min.js'); ?>
-<?php js::set('markdownText', $doc->content);?>
+<?php js::set('markdownText', htmlspecialchars($doc->content));?>
 <script>
 $(function()
 {

From 3c4ee4bf5aff957e5c52198dab2ee24aecc74636 Mon Sep 17 00:00:00 2001
From: chaideqing <chaideqing@easycorp.ltd>
Date: Wed, 16 Nov 2022 13:59:07 +0800
Subject: [PATCH 2/2] * Fix feedback1441 another file.

---
 module/doc/view/view.html.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/module/doc/view/view.html.php b/module/doc/view/view.html.php
index c3776fa5e3..5f3c5be6a7 100644
--- a/module/doc/view/view.html.php
+++ b/module/doc/view/view.html.php
@@ -244,7 +244,7 @@ js::set('docID', $doc->id);
 <?php if($doc->contentType == 'markdown'):?>
 <?php css::import($jsRoot . "markdown/simplemde.min.css");?>
 <?php js::import($jsRoot . 'markdown/simplemde.min.js'); ?>
-<?php js::set('markdownText', $doc->content);?>
+<?php js::set('markdownText', htmlspecialchars($doc->content));?>
 <script>
 $(function()
 {