From f4e8babd12bd96cb3301e12508a5fd7afba8053e Mon Sep 17 00:00:00 2001
From: Cell <1024@lruihao.cn>
Date: Thu, 25 Apr 2024 10:46:55 +0800
Subject: [PATCH] :bug: Fix: unencoded Content in Search Leads to JavaScript
 Execution Risk in autocomplete-js

Fixes #416
---
 assets/js/theme.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/assets/js/theme.js b/assets/js/theme.js
index 68d32619..8930752a 100644
--- a/assets/js/theme.js
+++ b/assets/js/theme.js
@@ -233,7 +233,7 @@ class FixIt {
                 const results = {};
                 window._index.search(query).forEach(({ item, refIndex, matches }) => {
                   let title = item.title;
-                  let content = item.content;
+                  let content = item.content.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;')
                   matches.forEach(({ indices, value, key }) => {
                     if (key === 'content') {
                       let offset = 0;