diff --git a/frontend/templates/search.html b/frontend/templates/search.html index 89ad5cb7..28cb0dfc 100644 --- a/frontend/templates/search.html +++ b/frontend/templates/search.html @@ -298,9 +298,13 @@ } function escapeHtml(str) { - const d = document.createElement('div'); - d.textContent = str; - return d.innerHTML; + if (str === null || str === undefined) return ''; + return String(str) + .replace(/&/g, '&') + .replace(//g, '>') + .replace(/"/g, '"') + .replace(/'/g, '''); } /**