HTML escape text

1 files changed, 9 insertions, 1 deletions

diff --git a/lib/documents.js b/lib/documents.js
index 5d2d0b7..b91c3b1 100644
--- a/lib/documents.js
+++ b/lib/documents.js
@@ -47,7 +47,7 @@ function DocumentConverter(options) {
             return element.children.map(elementToHtml).join("");
         },
         "text": function(element) {
-            return element.value;
+            return escapeHtml(element.value);
         }
     };
     return {
@@ -83,3 +83,11 @@ function Text(value) {
         value: value
     };
 }
+
+function escapeHtml(value) {
+    return value
+        .replace(/&/g, '&')
+        .replace(/"/g, '"')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;');
+}