From f96661fd026fce7680e34466d1e62ed6fa9c72a5 Mon Sep 17 00:00:00 2001
From: Ntsekees <ntsekees@users.noreply.github.com>
Date: Thu, 30 Nov 2023 18:59:39 +0100
Subject: [PATCH] =?UTF-8?q?=E2=9F=A6lexicon.html=E2=9F=A7:=20Adding=20func?=
 =?UTF-8?q?tion=20=E2=9F=A6with=5Fescaped=5Fhtml=E2=9F=A7=20for=20escaping?=
 =?UTF-8?q?=20possible=20HTML=20code=20in=20lexicon=20fields;=20refactorin?=
 =?UTF-8?q?g=20a=20bit=20the=20table=20generation=20code=20to=20reduce=20r?=
 =?UTF-8?q?edundancy.?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 lexicon.html | 26 ++++++++++++++++++--------
 1 file changed, 18 insertions(+), 8 deletions(-)

diff --git a/lexicon.html b/lexicon.html
index 47d50d0..d22103d 100644
--- a/lexicon.html
+++ b/lexicon.html
@@ -41,6 +41,19 @@
 		<br /><br />
 		<div id="content">(LEXICON NOT YET LOADED!)</div>
 		<script type="text/javascript">
+			function with_escaped_html(text) {
+				return text.replace(/[&<>"']/g, function(ch) {
+					switch (ch) {
+						case '&': return '&amp;';
+						case '<': return '&lt;';
+						case '>': return '&gt;';
+						case '"': return '&quot;';
+						default:  return '&#039;';
+							/* '&apos;' in another option in HTML5, but is absent from
+								 HTML4. */
+					}
+				});
+			}
 			function compare(a, b) {
 				if(a === "") {
 					 return 1;
@@ -66,14 +79,11 @@
 				});
 				s = "";
 				lexicon.forEach((e, i, l) => {
-					s += "<tr>\n";
-					s += "<td>" + e.morpheme + "</td>\n";
-					s += "<td>" + e.type + "</td>\n";
-					s += "<td>" + e.subtype + "</td>\n";
-					s += "<td>" + e.eng + "</td>\n";
-					s += "<td>" + e.tags + "</td>\n";
-					s += "<td>" + e.predilex_id + "</td>\n";
-					s += "</tr>\n";
+					entries = [
+						e.morpheme, e.type, e.subtype, e.eng, e.tags, e.predilex_id];
+					entries = entries.map(
+						ε => "<td>" + with_escaped_html(ε) + "</td>\n");
+					s += "<tr>\n" + entries.join("") + "</tr>\n";
 				});
 				content =
 					"<table cellspacing='2px'>\n<thead>\n<td>Morpheme</td>" +