diff --git a/layouts/partials/openapi/render-object-table.html b/layouts/partials/openapi/render-object-table.html
index 030978b1..6faa21d9 100644
--- a/layouts/partials/openapi/render-object-table.html
+++ b/layouts/partials/openapi/render-object-table.html
@@ -46,7 +46,7 @@
{{ $property_name }} |
- {{ partial "partials/property-type" $property }} |
+ {{ partial "partials/property-type" $property | safeHTML }} |
{{ partial "partials/property-description" (dict "property" $property "required" $required) }} |
@@ -67,7 +67,7 @@
{{ $property := . }}
- {{ partial "partials/property-type" $property }} |
+ {{ partial "partials/property-type" $property | safeHTML }} |
{{ partial "partials/property-description" (dict "property" $property) }} |
@@ -128,14 +128,14 @@
{{ end }}
{{ else }}
{{ range .type }}
- {{ $types = $types | append . }}
+ {{ $types = $types | append (htmlEscape .) }}
{{ end }}
{{ end }}
{{ $type = delimit $types "|" }}
{{ else }}
{{/* A simple type like string or boolean */}}
- {{ $type = .type }}
+ {{ $type = (htmlEscape .type) }}
{{ end }}
{{ return $type }}
@@ -165,9 +165,9 @@
If the property has a `title`, use that rather than `type`.
This means we can write things like `EventFilter` rather than `object`.
*/}}
- {{ $type = .title }}
+ {{ $type = .title | htmlEscape }}
{{ if .anchor }}
- {{ $type = printf "%s" (htmlEscape .anchor) (htmlEscape $type) | safeHTML }}
+ {{ $type = printf "%s" (htmlEscape .anchor) $type }}
{{ end }}
{{ else if reflect.IsMap .additionalProperties }}
{{/*