bugfix

polaris1119 · polaris1119 · commit 77474ad03d0d · 2016-05-27T22:37:40.000+08:00
diff --git a/websites/code2/studygolang/src/model/document.go b/websites/code2/studygolang/src/model/document.go
@@ -9,6 +9,7 @@ package model
 import (
 	"db"
 	"fmt"
+	"html/template"
 	"regexp"
 	"strings"
 )
@@ -94,7 +95,7 @@ func NewDocument(object interface{}, objectExt interface{}) *Document {
 			Title:   objdoc.Title,
 			Author:  userLogin.Username,
 			PubTime: objdoc.Ctime.String(),
-			Content: objdoc.Content,
+			Content: template.HTMLEscapeString(objdoc.Content),
 			Tags:    "",
 			Viewnum: viewnum,
 			Cmtnum:  cmtnum,
