@itwin/core-backend 5.14.0-dev.9 → 5.14.2

package/lib/cjs/Element.js

@@ -18,6 +18,9 @@ const Model_1 = require("./Model");
 const NavigationRelationship_1 = require("./NavigationRelationship");
 const Symbols_1 = require("./internal/Symbols");
 const ecschema_metadata_1 = require("@itwin/ecschema-metadata");
+function escapeHtml(text) {
+    return text.replace(/[&<>"']/g, (character) => `&#${character.charCodeAt(0)};`);
+}
 /** The smallest individually identifiable building block for modeling the real world in an iModel.
  * Each element represents an [[Entity]] in the real world. Sets of Elements (contained in [[Model]]s) are used to model
  * other Elements that represent larger scale real world entities. Using this recursive modeling strategy,
@@ -465,11 +468,11 @@ class Element extends Entity_1.Entity {
     getToolTipMessage() {
         const addKey = (key) => `<b>%{iModelJs:Element.${key}}:</b> `; // %{iModelJs:Element.xxx} is replaced with localized value of xxx in frontend.
         const msg = [];
-        const display = this.getDisplayLabel();
+        const display = escapeHtml(this.getDisplayLabel());
         msg.push(display ? display : `${addKey("Id") + this.id}, ${addKey("Type")}${this.className}`);
         if (this instanceof GeometricElement)
-            msg.push(addKey("Category") + this.iModel.elements.getElement(this.category).getDisplayLabel());
-        msg.push(addKey("Model") + this.iModel.elements.getElement(this.model).getDisplayLabel());
+            msg.push(addKey("Category") + escapeHtml(this.iModel.elements.getElement(this.category).getDisplayLabel()));
+        msg.push(addKey("Model") + escapeHtml(this.iModel.elements.getElement(this.model).getDisplayLabel()));
         return msg;
     }
     insert(txn) {