Escape HTML special characters in sidebar (#1227)

elixir-lang · Jul 18, 2020 · d26ca71 · d26ca71
1 parent 5fed479
commit d26ca71
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/ex_doc/formatter/html/templates.ex b/lib/ex_doc/formatter/html/templates.ex
@@ -149,7 +149,7 @@ defmodule ExDoc.Formatter.HTML.Templates do
   end
 
   defp sidebar_entries({group, docs}) do
-    nodes = Enum.map(docs, fn doc -> %{id: doc.id, anchor: URI.encode(HTML.link_id(doc))} end)
+    nodes = Enum.map(docs, fn doc -> %{id: h(doc.id), anchor: URI.encode(HTML.link_id(doc))} end)
     %{key: HTML.text_to_id(group), name: group, nodes: nodes}
   end