From c56f80cc220a7567a9b94967b1dda0b6d8bd061a Mon Sep 17 00:00:00 2001
From: mpetrov <mpetrov@thingsboard.io>
Date: Tue, 24 Dec 2024 17:12:45 +0200
Subject: [PATCH] Usage of special HTML chars in mardown fix

---
 ui-ngx/src/app/shared/models/js-function.models.ts | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/ui-ngx/src/app/shared/models/js-function.models.ts b/ui-ngx/src/app/shared/models/js-function.models.ts
index 5bfa50de6f..c4b38777c2 100644
--- a/ui-ngx/src/app/shared/models/js-function.models.ts
+++ b/ui-ngx/src/app/shared/models/js-function.models.ts
@@ -98,7 +98,7 @@ export const loadModuleMarkdownDescription = (http: HttpClient, translate: Trans
         } else {
           propDescription += `<p class="!pl-4 !pr-4"><em>const</em> <strong>${propName}</strong>: <code>${type}</code>`;
           if (type !== 'object') {
-            propDescription += ` = ${prop}`;
+            propDescription += ` = ${type === 'string' ? handleHtmlSpecialChars(prop) : prop}`;
           }
           propDescription += '</p>';
         }
@@ -133,6 +133,10 @@ export const loadModuleMarkdownDescription = (http: HttpClient, translate: Trans
   );
 }
 
+const handleHtmlSpecialChars = (text: string): string => {
+  return text.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
+}
+
 export const loadModuleMarkdownSourceCode = (http: HttpClient, translate: TranslateService, resource: ResourceInfo): Observable<string> => {
   let sourceCode = `<div class="flex flex-col !pl-4"><h6>${resource.title}</h6><small>${translate.instant('js-func.source-code')}</small></div>\n\n`;
   return loadFunctionModuleSource(http, resource.link).pipe(