4teamwork / ftw.solr

Solr integration for Plone
5 stars 5 forks source link

Fix escaping issue when highlighting plaintext. #100

Closed jone closed 6 years ago

jone commented 6 years ago

Problem: Solr returns <em>-highlighted text, but the text is not html escaped. Using "<" for example can cause the page templating engine to drop closing tags.

Solution: Escape all text in the snippet endpoint, except for the highlighting <em>-tags.