From 4774c058094d3d972ec46a716607b32711f74d37 Mon Sep 17 00:00:00 2001
From: yuetsh <517252939@qq.com>
Date: Mon, 9 Mar 2026 10:49:44 +0800
Subject: [PATCH] fix: escape lang value in code block renderer

---
 src/components/PromptPanel.vue | 10 ++++------
 1 file changed, 4 insertions(+), 6 deletions(-)

diff --git a/src/components/PromptPanel.vue b/src/components/PromptPanel.vue
index 9442520..31d9d57 100644
--- a/src/components/PromptPanel.vue
+++ b/src/components/PromptPanel.vue
@@ -59,12 +59,10 @@ function send() {
 
 const renderer = new Renderer()
 renderer.code = function ({ text, lang }: { text: string; lang?: string }) {
-  const label = lang ? `查看代码（${lang}）` : "查看代码"
-  const escaped = text
-    .replace(/&/g, "&amp;")
-    .replace(/</g, "&lt;")
-    .replace(/>/g, "&gt;")
-  return `<details class="code-block"><summary>${label}</summary><pre><code class="hljs${lang ? ` language-${lang}` : ""}">${escaped}</code></pre></details>`
+  const escape = (s: string) =>
+    s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;")
+  const label = lang ? `查看代码（${escape(lang)}）` : "查看代码"
+  return `<details class="code-block"><summary>${label}</summary><pre><code class="hljs${lang ? ` language-${escape(lang)}` : ""}">${escape(text)}</code></pre></details>`
 }
 
 function renderMarkdown(text: string): string {