One possible fix for #2198

hexojs · Mar 8, 2017 · ff2e465 · ff2e465
1 parent 5a7ea3e
commit ff2e465
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/lib/plugins/helper/toc.js b/lib/plugins/helper/toc.js
@@ -1,6 +1,7 @@
 'use strict';
 
 var cheerio;
+var escapeHTML = require('hexo-util').escapeHTML;
 
 function tocHelper(str, options) {
   options = options || {};
@@ -25,7 +26,7 @@ function tocHelper(str, options) {
   headings.each(function() {
     var level = +this.name[1];
     var id = $(this).attr('id');
-    var text = $(this).text();
+    var text = escapeHTML($(this).text());
 
     lastNumber[level - 1]++;