escape html content

socraticDevBlog · May 20, 2024 · 4226a84 · 4226a84
1 parent 5352880
commit 4226a84
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/src/lambda_handlers.py b/src/lambda_handlers.py
@@ -1,4 +1,4 @@
-import json
+import json, html
 from api_handler import ApiHandler
 from model import PasteDataAware
 
@@ -10,6 +10,7 @@ def get_handler(paste: PasteDataAware, is_web_browser: bool = False):
         return {"statusCode": 404}
 
     if is_web_browser:
+        escaped_content = html.escape(content)
         response_html = """
             <!DOCTYPE html>
             <html>
@@ -22,7 +23,7 @@ def get_handler(paste: PasteDataAware, is_web_browser: bool = False):
                 </body>
             </html>
             """.format(
-            content
+            escaped_content
         )
         return {
             "statusCode": 200,