Escape characters that were unescaped by the parser

diff --git a/includes/HTMLDiff.php b/includes/HTMLDiff.php
index 8318deb..614b86d 100644 (file)
--- a/includes/HTMLDiff.php
+++ b/includes/HTMLDiff.php
@@ -1714,6 +1714,6 @@ class DelegatingContentHandler {
        }
 
        function characters($chars){
-               $this->delegate->addHtml($chars);
+               $this->delegate->addHtml(htmlspecialchars($chars));
        }
 }