Merge pull request #26 from loadchange/escape-special-chars

Escape special characters in Canvas mode
loadchange · May 15, 2024 · 0b9355c · 0b9355c
2 parents ac32b76 + 5b301ff
commit 0b9355c
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/src/core/canvas.ts b/src/core/canvas.ts
@@ -12,8 +12,13 @@ class CanvasWay {
     this.canvas.setAttribute('height', `${ height }`);
   }
 
+  private escapeSpecialCharacters(txt: string): string {
+    return txt.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
+  }
+
   public render(): string {
-    const { txt, x, y, width, height, font, color, fontSize, alpha, angle } = this.watermark;
+    const { x, y, width, height, font, color, fontSize, alpha, angle } = this.watermark;
+    const txt = this.escapeSpecialCharacters(this.watermark.txt);
     const ctx = this.canvas.getContext('2d');
     if (ctx === null) {
       throw new Error('getContext error');