From 18824710c79c6cdc1f71d3dc89dfd9be9100f911 Mon Sep 17 00:00:00 2001
From: Mark IJbema <mark@kilocode.ai>
Date: Mon, 23 Mar 2026 13:18:45 +0100
Subject: [PATCH] fix(ui): escape HTML in codespan renderer to prevent tag
 injection

The custom codespan renderer injected raw text into <code> tags without
HTML-escaping. When backtick-wrapped content contained HTML tags like
`<textarea>`, the raw tag entered the DOM. Since <textarea> is a raw
text element in HTML, the browser's parser consumed all subsequent
content as textarea text, breaking <code> tag pairing and leaving
</code> visible as literal text.
---
 packages/ui/src/context/marked.tsx | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/packages/ui/src/context/marked.tsx b/packages/ui/src/context/marked.tsx
index 3cf17443742..1da6f16d2ac 100644
--- a/packages/ui/src/context/marked.tsx
+++ b/packages/ui/src/context/marked.tsx
@@ -632,12 +632,18 @@ export const { use: useMarked, provider: MarkedProvider } = createSimpleContext(
           // kilocode_change start
           codespan({ text }) {
             const file = parseFilePath(text)
+            const escaped = text
+              .replace(/&/g, "&amp;")
+              .replace(/</g, "&lt;")
+              .replace(/>/g, "&gt;")
+              .replace(/"/g, "&quot;")
+              .replace(/'/g, "&#39;")
             if (file) {
               const lineAttr = file.line ? ` data-file-line="${file.line}"` : ""
               const colAttr = file.column ? ` data-file-col="${file.column}"` : ""
-              return `<code class="file-link" data-file-path="${file.path}"${lineAttr}${colAttr}>${text}</code>`
+              return `<code class="file-link" data-file-path="${file.path}"${lineAttr}${colAttr}>${escaped}</code>`
             }
-            return `<code>${text}</code>`
+            return `<code>${escaped}</code>`
           },
           code({ text, lang }) {
             const escaped = text