#153 XSS safty improvements

Author: Michael Mrowetz

Diff for: src/ts/transformers/har-tabs.ts

@@ -131,5 +131,5 @@ function makeImgTab(entry: Entry): WaterfallEntryTab {
   return makeLazyWaterfallEntryTab(
     "Preview",
     (detailsHeight: number) => `<img class="preview" style="max-height:${(detailsHeight - 100)}px"
- data-src="${entry.request.url}" />`);
+ data-src="${entry.request.url.replace("\"", "&quot;")}" />`);
 }

Diff for: src/ts/transformers/helpers.ts

@@ -25,7 +25,7 @@ export function makeDefinitionList(dlKeyValues: KvTuple[], addClass: boolean = f
   return dlKeyValues
     .filter((tuple: KvTuple) => tuple[1] !== undefined)
     .map((tuple) => `
-      <dt ${makeClass(tuple[0])}>${tuple[0]}</dt>
+      <dt ${makeClass(tuple[0])}>${escapeHtml(tuple[0])}</dt>
       <dd>${escapeHtml(tuple[1])}</dd>
     `).join("");
 }