Artem A

Hi Jeff,

we tested new plugin version (2.6) and the issue is still there. How to reproduce it:

0. Select “Highlight.js” as the library to use
1. Create a new post with Gutenberg Editor on WordPress 5.5
2. Insert new Prismatic block into it
3. Put the following code into Prismatic block:

<dependencies>
<dependency>
<groupId>com.baeldung</groupId>
<artifactId>optional-project</artifactId>
<version>1.0</version>
<optional>true</optional>
</dependency>
</dependencies>

4. Publish the post and check the result on front end. XML tags would be stripped.

Screenshots: https://imgur.com/a/jpe1AFS

I’ve checked and there is corresponding line in the “buttons-highlight.js” ( #105 ):

ed.insertContent(‘

<code class="language-'+ code.language +'">'+ code.snippet + '

‘);

we solved this issue on our site by replacing this line with fixed version:

ed.insertContent(‘

<code class="language-'+ code.language +'">'+ tinymce.DOM.encode(code.snippet) + '

‘);

• This reply was modified 5 years, 5 months ago by Artem A.
• This reply was modified 5 years, 5 months ago by Artem A.

Update:

I’ve tested this issue in WP 5.2.2 with default theme and no plugins, and HTML was escaped and displayed properly. But in WP 5.4.2 (with default theme and no plugins) HTML is not escaped.