Escape line number in HTML

Author: CompuIves

packages/app/src/app/components/Preview/DevTools/Tests/TestDetails/ErrorDetails/index.tsx

@@ -3,6 +3,8 @@ import styled from 'styled-components';
 import theme from '@codesandbox/common/lib/theme';
 import ansiHTML from 'ansi-html';
 
+import { escapeHtml } from 'app/utils/escape';
+
 import { TestError } from '../../';
 
 const Container = styled.div`
@@ -22,15 +24,6 @@ const Container = styled.div`
   }
 `;
 
-function escapeHtml(unsafe) {
-  return unsafe
-    .replace(/&/g, '&')
-    .replace(/</g, '&lt;')
-    .replace(/>/g, '&gt;')
-    .replace(/"/g, '&quot;')
-    .replace(/'/g, '&#039;');
-}
-
 const formatDiffMessage = (error: TestError, path: string) => {
   let finalMessage: string = '';
   if (error.matcherResult) {
@@ -92,7 +85,7 @@ const formatDiffMessage = (error: TestError, path: string) => {
             ? `<span style="color:${theme.red()};">></span> `
             : '') +
           newMargin.join('') +
-          code.lineNumber +
+          escapeHtml('' + code.lineNumber) +
           ' | ' +
           escapeHtml(code.content) +
           '</div>';

packages/app/src/app/utils/escape.ts

@@ -0,0 +1,8 @@
+export function escapeHtml(unsafe: string) {
+  return unsafe
+    .replace(/&/g, '&')
+    .replace(/</g, '&lt;')
+    .replace(/>/g, '&gt;')
+    .replace(/"/g, '&quot;')
+    .replace(/'/g, '&#039;');
+}