No HTML markup escaping

apvarun / toastify-js

Pure JavaScript library for better notification messages

https://apvarun.github.io/toastify-js/

MIT License

2.18k stars 233 forks source link

No HTML markup escaping #78

Open StefCDev opened 3 years ago

StefCDev commented 3 years ago

Hello, escaping of HTML markup does not work, if I pass even a small HTML code it is written but not interpreted.

It creates a problem also because I need to escape characters like 'è' that are not correctly displayed but the corresponding HTML tag (è) is displayed as is and not interpreted.

AStoker commented 3 years ago

Can you show how you're trying to use toastify? Have you turned off the escapeMarkup option? By default, html is escaped to help ensure XSS issues don't appear.