diff --git a/layouts/partials/openapi/render-object-table.html b/layouts/partials/openapi/render-object-table.html index 030978b1..6faa21d9 100644 --- a/layouts/partials/openapi/render-object-table.html +++ b/layouts/partials/openapi/render-object-table.html @@ -46,7 +46,7 @@ {{ $property_name }} - {{ partial "partials/property-type" $property }} + {{ partial "partials/property-type" $property | safeHTML }} {{ partial "partials/property-description" (dict "property" $property "required" $required) }} @@ -67,7 +67,7 @@ {{ $property := . }} - {{ partial "partials/property-type" $property }} + {{ partial "partials/property-type" $property | safeHTML }} {{ partial "partials/property-description" (dict "property" $property) }} @@ -128,14 +128,14 @@ {{ end }} {{ else }} {{ range .type }} - {{ $types = $types | append . }} + {{ $types = $types | append (htmlEscape .) }} {{ end }} {{ end }} {{ $type = delimit $types "|" }} {{ else }} {{/* A simple type like string or boolean */}} - {{ $type = .type }} + {{ $type = (htmlEscape .type) }} {{ end }} {{ return $type }} @@ -165,9 +165,9 @@ If the property has a `title`, use that rather than `type`. This means we can write things like `EventFilter` rather than `object`. */}} - {{ $type = .title }} + {{ $type = .title | htmlEscape }} {{ if .anchor }} - {{ $type = printf "%s" (htmlEscape .anchor) (htmlEscape $type) | safeHTML }} + {{ $type = printf "%s" (htmlEscape .anchor) $type }} {{ end }} {{ else if reflect.IsMap .additionalProperties }} {{/*