From e1bea3555d006a6fe52094a938d90101ffcc92f0 Mon Sep 17 00:00:00 2001
From: Benjamin Frueh <benjamin.frueh@gmail.com>
Date: Tue, 9 Jun 2026 16:19:03 +0200
Subject: [PATCH] chore: escape inline markdown content

Signed-off-by: Benjamin Frueh <benjamin.frueh@gmail.com>
---
 src/components/EditorMarkdownIt.vue | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/components/EditorMarkdownIt.vue b/src/components/EditorMarkdownIt.vue
index c84e7c2ef..993e3d94c 100644
--- a/src/components/EditorMarkdownIt.vue
+++ b/src/components/EditorMarkdownIt.vue
@@ -160,7 +160,7 @@ export default {
 		setInlineCodeRule() {
 			this.md.renderer.rules.code_inline = function(tokens, idx, options, env, self) {
 				const token = tokens[idx]
-				return '<code class="inline-code">' + token.content + '</code>'
+				return '<code class="inline-code">' + escapeHtml(token.content) + '</code>'
 			}
 		},
 	},