Moved my code to auto escape html to the right place

1 files changed, 3 insertions, 0 deletions

diff --git a/plugin/highlight/highlight.js b/plugin/highlight/highlight.js
index 6756359..5a6ad90 100644
--- a/plugin/highlight/highlight.js
+++ b/plugin/highlight/highlight.js
@@ -11,6 +11,9 @@
 				element.innerHTML = element.innerHTML.trim();
 			}
 
+			// Now escape html
+			element.innerHTML = element.innerHTML.replace(/</g,"&lt;").replace(/>/g,"&gt;");
+
 			// re-highlight when focus is lost (for edited code)
 			element.addEventListener( 'focusout', function( event ) {
 				hljs.highlightBlock( event.currentTarget );