From 07d6d85170b41eeed24c7394eb63a45950f28bd8 Mon Sep 17 00:00:00 2001
From: Martin Granell <925072+mgranell@users.noreply.github.com>
Date: Thu, 27 May 2021 17:24:21 +1000
Subject: [PATCH] HTML escape embded html to fix mermaid rendering

---
 src/core/render/embed.js | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/src/core/render/embed.js b/src/core/render/embed.js
index 7a5cf3b68..1ec299fc1 100644
--- a/src/core/render/embed.js
+++ b/src/core/render/embed.js
@@ -63,7 +63,13 @@ function walkFetchEmbed({ embedTokens, compile, fetch }, cb) {
             );
           } else if (token.embed.type === 'mermaid') {
             embedToken = [
-              { type: 'html', text: `<div class="mermaid">\n${text}\n</div>` },
+              {
+                type: 'html',
+                text: `<div class="mermaid">\n${text
+                  .replace(/&/g, '&amp;')
+                  .replace(/</g, '&lt;')
+                  .replace(/"/g, '&quot;')}\n</div>`,
+              },
             ];
             embedToken.links = {};
           } else {