# HG changeset patch
# User Rik <rik@octave.org>
# Date 1523770381 25200
# Node ID 0bc58956aa402486082f1ddb80b802f92d004026
# Parent  75ee2de069eee090a35e4eb22533b9d83e42338b
Escape '<', '>' in NEWS file before it is displayed as HTML in Release Notes window (bug #53642).

* main-window.cc (display_release_notes): Replace '<' with "&lt;" and '>' with
"&gt;" in NEWS file before it is displayed as HTML.

diff -r 75ee2de069ee -r 0bc58956aa40 libgui/src/main-window.cc
--- a/libgui/src/main-window.cc	Sun Apr 15 07:08:41 2018 +0200
+++ b/libgui/src/main-window.cc	Sat Apr 14 22:33:01 2018 -0700
@@ -459,6 +459,10 @@
             news = stream->readAll ();
             if (! news.isEmpty ())
               {
+                // Convert '<', '>' which would be interpreted as HTML
+                news.replace ("<", "&lt;");
+                news.replace (">", "&gt;");
+                // Add HTML tags for pre-formatted text
                 news.prepend ("<pre>");
                 news.append ("</pre>");
               }