added escaping html elements on doc. creation.

svgdotjs / svgdom

Straightforward DOM implementation to make SVG.js run headless on Node.js

MIT License

274 stars 54 forks source link

Closed rssh closed 6 years ago

rssh commented 6 years ago

dom.createTextNode should escape HTML entities in text, otherwise illegal svg() will be produced in innerHtml.