scrivo / highlight.php

A port of highlight.js by Ivan Sagalaev to PHP
BSD 3-Clause "New" or "Revised" License
695 stars 45 forks source link

README: Fix potential security issue #75

Closed sbrl closed 4 years ago

sbrl commented 4 years ago

If the supplied language doesn't exist in the example, the code is printed as is. Depending on where the code came from (e.g. user input), this could be a security issue.

This PR fixes this to avoid the problem.