fix(svg): encode HTML when converting vnode to string.

src/core/dom.ts

@@ -1,6 +1,7 @@
 
 import env from './env';
 import {buildTransformer} from './fourPointsTransform';
+import {Dictionary} from './types';
 
 const EVENT_SAVED_PROP = '___zrEVENTSAVED';
 const _calcOut: number[] = [];
@@ -167,3 +168,20 @@ function preparePointerTransformer(markers: HTMLDivElement[], saved: SavedInfo,
 export function isCanvasEl(el: HTMLElement): el is HTMLCanvasElement {
     return el.nodeName.toUpperCase() === 'CANVAS';
 }
+
+const replaceReg = /([&<>"'])/g;
+const replaceMap: Dictionary<string> = {
+    '&': '&amp;',
+    '<': '&lt;',
+    '>': '&gt;',
+    '"': '&quot;',
+    '\'': '&#39;'
+};
+
+export function encodeHTML(source: string): string {
+    return source == null
+        ? ''
+        : (source + '').replace(replaceReg, function (str, c) {
+            return replaceMap[c];
+        });
+}

src/svg/core.ts

@@ -1,4 +1,5 @@
 import { keys, map } from '../core/util';
+import { encodeHTML } from '../core/dom';
 
 export type CSSSelectorVNode = Record<string, string>
 export type CSSAnimationVNode = Record<string, Record<string, string>>
@@ -71,7 +72,7 @@ export function vNodeToString(el: SVGVNode, opts?: {
     function convertElToString(el: SVGVNode): string {
         const {children, tag, attrs} = el;
         return createElementOpen(tag, attrs)
-            + (el.text || '')
+            + encodeHTML(el.text)
             + (children ? `${S}${map(children, child => convertElToString(child)).join(S)}${S}` : '')
             + createElementClose(tag);
     }