diff --git a/static/js/managers/UpdateService.js b/static/js/managers/UpdateService.js index 674030c7..b1dfbcb6 100644 --- a/static/js/managers/UpdateService.js +++ b/static/js/managers/UpdateService.js @@ -731,9 +731,16 @@ export class UpdateService { } // Simple markdown parser for changelog items + // Simple markdown parser for changelog items + // Escape HTML entities first so angle brackets in content (e.g. ``) + // aren't swallowed by innerHTML's HTML parser as invalid tags parseMarkdown(text) { if (!text) return ''; + text = text.replace(/&/g, '&'); + text = text.replace(//g, '>'); + // Handle bold text (**text**) text = text.replace(/\*\*(.*?)\*\*/g, '$1');