fixed all cwv by adding a escapeTextReinterpreted function

4 files changed, 20 insertions, 9 deletions

diff --git a/public/js/getrepo.js b/public/js/getrepo.js
index b78eb30a..93a9c45a 100644
--- a/public/js/getrepo.js
+++ b/public/js/getrepo.js
@@ -91,15 +91,15 @@ var displayRepos = function displayRepos(repos) {
       var forksUrl = "".concat(userHome, "/").concat(repo.name, "/network/members");
       var listItem = document.createElement('li');
       listItem.classList.add('repo', 'animate', 'zoomIn');
-      listItem.innerHTML = "\n\t\t\t<h2 class=\"repo-title\">".concat(repo.name, "</h2>\n\t\t\t<span class=\"rdescription\">").concat(repo.description ? "<span class=\"rdescriptiontext\">".concat(repo.description, "</span>") : '', "<br/><br/>");
+      listItem.innerHTML = escapeTextReinterpreted("\n\t\t\t<h2 class=\"repo-title\">".concat(repo.name, "</h2>\n\t\t\t<span class=\"rdescription\">").concat(repo.description ? "<span class=\"rdescriptiontext\">".concat(repo.description, "</span>") : '', "<br/><br/>"));
       if (repo.stargazers_count > 0) {
-        listItem.innerHTML += "<a href=\"".concat(starsUrl, "\">\n\t\t\t<span>\u2B50 ").concat(repo.stargazers_count, "</span></a>");
+        listItem.innerHTML += escapeTextReinterpreted("<a href=\"".concat(starsUrl, "\">\n\t\t\t<span>\u2B50 ").concat(repo.stargazers_count, "</span></a>"));
       }
       if (repo.language) {
         listItem.innerHTML += "<a href=\"".concat(langUrl, "\">\n\t\t\t<span>").concat(devicons[repo.language], "</span></a>");
       }
       if (repo.forks_count > 0) {
-        listItem.innerHTML += "<a href=\"".concat(starsUrl, "\">\n\t\t\t<span>").concat(devicons["Git"], " ").concat(repo.forks_count, "</span></a>");
+        listItem.innerHTML += escapeTextReinterpreted("<a href=\"".concat(starsUrl, "\">\n\t\t\t<span>").concat(devicons["Git"], " ").concat(repo.forks_count, "</span></a>"));
       }
       if (repo.homepage && repo.homepage !== "") {
         listItem.innerHTML += "<br /> <br />\n\t\t\t<a class=\"link-btn btn-code\" href=".concat(repo.html_url, ">Code ").concat(devicons["Github"], "</a>\n\t\t\t<a class=\"link-btn btn-live\" href=").concat(repo.homepage, ">Live ").concat(devicons["Chrome"], "</a> <br />");
diff --git a/public/js/main.js b/public/js/main.js
index e7a44b6a..323dae9e 100644
--- a/public/js/main.js
+++ b/public/js/main.js
@@ -6,4 +6,7 @@ if ('serviceWorker' in navigator) {
       console.log('sw.js failed: ', err);
     });
   });
+}
+function escapeTextReinterpreted(htmlStr) {
+  return htmlStr.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
 }
\ No newline at end of file
diff --git a/src/js/getrepo.js b/src/js/getrepo.js
index 675a187c..c7d1a70e 100644
--- a/src/js/getrepo.js
+++ b/src/js/getrepo.js
@@ -72,13 +72,13 @@ const displayRepos = (repos) => {
 
 		let listItem = document.createElement('li');
 		listItem.classList.add('repo', 'animate', 'zoomIn')
-		listItem.innerHTML = `
+		listItem.innerHTML = escapeTextReinterpreted(`
 			<h2 class="repo-title">${repo.name}</h2>
-			<span class="rdescription">${repo.description ? `<span class="rdescriptiontext">${repo.description}</span>` : ''}<br/><br/>`
+			<span class="rdescription">${repo.description ? `<span class="rdescriptiontext">${repo.description}</span>` : ''}<br/><br/>`)
 
 		if (repo.stargazers_count > 0) {
-			listItem.innerHTML += `<a href="${starsUrl}">
-			<span>⭐ ${repo.stargazers_count}</span></a>`
+			listItem.innerHTML += escapeTextReinterpreted(`<a href="${starsUrl}">
+			<span>⭐ ${repo.stargazers_count}</span></a>`)
 		}
 
 		if (repo.language) {
@@ -87,8 +87,8 @@ const displayRepos = (repos) => {
 		}
 
 		if (repo.forks_count > 0) {
-			listItem.innerHTML += `<a href="${starsUrl}">
-			<span>${devicons["Git"]} ${repo.forks_count}</span></a>`
+			listItem.innerHTML += escapeTextReinterpreted(`<a href="${starsUrl}">
+			<span>${devicons["Git"]} ${repo.forks_count}</span></a>`)
 		}
 
 		if (repo.homepage && repo.homepage !== "") {
diff --git a/src/js/main.js b/src/js/main.js
index 1276c46c..88162510 100644
--- a/src/js/main.js
+++ b/src/js/main.js
@@ -7,4 +7,12 @@ if ('serviceWorker' in navigator) {
                 console.log('sw.js failed: ', err);
         });
     });
+}
+
+function escapeTextReinterpreted(htmlStr) {
+    return htmlStr.replace(/&/g, "&amp;")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;")
+        .replace(/'/g, "&#39;");        
 }
\ No newline at end of file