From 86e1ba871f0a494e8ad2f124c08994ffa7c6fb7e Mon Sep 17 00:00:00 2001
From: Emre Saglam <emresaglam@gmail.com>
Date: Tue, 24 Mar 2020 08:37:56 -0700
Subject: [PATCH] html sanitize Added a function to sanitize the html This is
 for browser side only.

---
 meilisearch-http/public/interface.html | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/meilisearch-http/public/interface.html b/meilisearch-http/public/interface.html
index 81b486632..1866f6c71 100644
--- a/meilisearch-http/public/interface.html
+++ b/meilisearch-http/public/interface.html
@@ -147,6 +147,14 @@
   </body>
 
   <script>
+    function sanitizeHTMLEntities (str) {
+        if(str && typeof str === 'string') {
+            str = str.replace(/</g,"&lt;");
+            str = str.replace(/>/g,"&gt;");
+          }
+    return str;
+    }
+
     function httpGet(theUrl) {
         var xmlHttp = new XMLHttpRequest();
         xmlHttp.open("GET", theUrl, false); // false for synchronous request
@@ -169,7 +177,8 @@
         lastRequest.open("GET", theUrl, true);
         lastRequest.onload = function (e) {
             if (lastRequest.readyState === 4 && lastRequest.status === 200) {
-                let httpResults = JSON.parse(lastRequest.responseText);
+                let sanitizedResponseText = lastRequest.responseText;
+                let httpResults = JSON.parse(sanitizedResponseText);
                 results.innerHTML = '';
 
                 let processingTimeMs = httpResults.processingTimeMs;