Fixed prevent XSS might break lots of tags and only need after rendered

1 files changed, 3 insertions, 1 deletions

diff --git a/public/js/pretty.js b/public/js/pretty.js
index 43e833c2..a38dc244 100644
--- a/public/js/pretty.js
+++ b/public/js/pretty.js
@@ -3,7 +3,9 @@ var text = $('<textarea/>').html(markdown.html()).text();
 md.meta = {};
 md.render(text); //only for get meta
 parseMeta(md, markdown, $('#toc'), $('#toc-affix'));
-var result = postProcess(md.render(text));
+var rendered = md.render(text);
+rendered = preventXSS(rendered);
+var result = postProcess(rendered);
 markdown.html(result.html());
 $(document.body).show();
 finishView(markdown);