Skip to content

Commit 69924a1

Browse files
committed
fix: escape script tags in stats source
fixes chrisbateman#21
1 parent f2cc506 commit 69924a1

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

src/plugin/plugin.js

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,12 +12,15 @@ export default class VisualizerPlugin {
1212
apply(compiler) {
1313
compiler.plugin('emit', (compilation, callback) => {
1414
let stats = compilation.getStats().toJson({chunkModules: true});
15+
let stringifiedStats = JSON.stringify(stats);
16+
stringifiedStats = stringifiedStats.replace(/</g, '&lt;').replace(/</g, '&gt;');
17+
1518
let html = `<!doctype html>
1619
<meta charset="UTF-8">
1720
<title>Webpack Visualizer</title>
1821
<style>${cssString}</style>
1922
<div id="App"></div>
20-
<script>window.stats = ${JSON.stringify(stats)};</script>
23+
<script>window.stats = ${stringifiedStats};</script>
2124
<script>${jsString}</script>
2225
`;
2326

0 commit comments

Comments
 (0)