1 files changed, 11 insertions, 5 deletions

@@ -45,7 +45,7 @@ $0 ~ CONFIG["raw_delim"] {
 }
 
 RAW {
-        bufpush($0)
+        bufpush(html_escape($0))
         next
 }
 
@@ -70,10 +70,7 @@ $0 ~ ("^" COMMENT_DELIM) {
         } else {
                 sep = "\n"
         }
-        # Sanitize HTML
-        gsub(/&/, "\\\\\\&", $0)
-        gsub(/</, "\\\\\\&lt;", $0)
-        gsub(/>/, "\\\\\\&gt;", $0)
+        $0 = html_escape($0)
         # Loop through BLOCK_TYPES
         for (bt in BLOCK_TYPES) {
                 if (match($0, "^" bt "[ \t]*")) {
@@ -258,3 +255,12 @@ function html_end()
         BUFFER = ""
         HTML = 0
 }
+
+function html_escape(text)
+{
+        # Sanitize HTML
+        gsub(/&/, "\\\\\\&amp;", text)
+        gsub(/</, "\\\\\\&lt;", text)
+        gsub(/>/, "\\\\\\&gt;", text)
+        return text
+}