Merge pull request #1347 from powelski/resolve-1272

Escape HTML for .txt contents
This commit is contained in:
Samuel Georges 2015-08-08 11:40:58 +10:00
commit d537cef720

View File

@ -69,10 +69,17 @@ class Content extends CmsCompoundObject
protected function parseMarkup()
{
$result = $this->markup;
$extension = strtolower(File::extension($this->fileName));
if (strtolower(File::extension($this->fileName)) == 'md') {
$result = Markdown::parse($this->markup);
switch ($extension) {
case 'txt':
$result = htmlspecialchars($this->markup);
break;
case 'md':
$result = Markdown::parse($this->markup);
break;
default:
$result = $this->markup;
}
return $result;