angular
diff --git a/‎adev/shared-docs/pipeline/shared/marked/extensions/docs-code/format/index.mts‎
Lines changed: 6 additions & 1 deletion b/‎adev/shared-docs/pipeline/shared/marked/extensions/docs-code/format/index.mts‎
Lines changed: 6 additions & 1 deletion
@@ -96,6 +96,11 @@ export function processForApiLinks(fragment: Element, apiEntries: ApiEntries): v
   });
 }
 
+/** Escapes text that is interpolated into an HTML string. */
+function escapeHtml(text: string): string {
+  return text.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
+}
+
 /** Build the header element if a header is provided in the token. */
 function buildHeaderElement(token: CodeToken) {
   let header = '';
@@ -104,7 +109,7 @@ function buildHeaderElement(token: CodeToken) {
   }
 
   if (token.header) {
-    header += `<h3>${token.header}</h3>`;
+    header += `<h3>${escapeHtml(token.header)}</h3>`;
   }
 
   if (!header) return '';
Original file line number	Diff line number	Diff line change
`@@ -96,6 +96,11 @@ export function processForApiLinks(fragment: Element, apiEntries: ApiEntries): v`
`96`	`96`	`});`
`97`	`97`	`}`
`98`	`98`
	`99`	`+/** Escapes text that is interpolated into an HTML string. */`
	`100`	`+function escapeHtml(text: string): string {`
	`101`	`+ return text.replace(/&/g, '&').replace(/</g, '<').replace(/>/g, '>');`
	`102`	`+}`
	`103`	`+`
`99`	`104`	`/** Build the header element if a header is provided in the token. */`
`100`	`105`	`function buildHeaderElement(token: CodeToken) {`
`101`	`106`	`let header = '';`
`@@ -104,7 +109,7 @@ function buildHeaderElement(token: CodeToken) {`
`104`	`109`	`}`
`105`	`110`
`106`	`111`	`if (token.header) {`
`107`		- header += `<h3>${token.header}</h3>`;
	`112`	+ header += `<h3>${escapeHtml(token.header)}</h3>`;
`108`	`113`	`}`
`109`	`114`
`110`	`115`	`if (!header) return '';`