diff --git a/lib/features/search-pad/SearchPad.js b/lib/features/search-pad/SearchPad.js index e37af8b7e..140ceb47c 100644 --- a/lib/features/search-pad/SearchPad.js +++ b/lib/features/search-pad/SearchPad.js @@ -11,6 +11,9 @@ import { getBBox as getBoundingBox } from '../../util/Elements'; +import { + escapeHTML +} from '../../util/EscapeUtil'; /** * Provides searching infrastructure @@ -507,9 +510,9 @@ function createHtmlText(tokens) { tokens.forEach(function(t) { if (t.matched) { - htmlText += '' + t.matched + ''; + htmlText += '' + escapeHTML(t.matched) + ''; } else { - htmlText += t.normal; + htmlText += escapeHTML(t.normal); } });