Merge pull request #1347 from powelski/resolve-1272

Escape HTML for .txt contents
This commit is contained in:
Samuel Georges 2015-08-08 11:40:58 +10:00
commit d537cef720

View File

@ -69,10 +69,17 @@ class Content extends CmsCompoundObject
protected function parseMarkup() protected function parseMarkup()
{ {
$result = $this->markup; $extension = strtolower(File::extension($this->fileName));
if (strtolower(File::extension($this->fileName)) == 'md') { switch ($extension) {
$result = Markdown::parse($this->markup); case 'txt':
$result = htmlspecialchars($this->markup);
break;
case 'md':
$result = Markdown::parse($this->markup);
break;
default:
$result = $this->markup;
} }
return $result; return $result;