ngdoc should escape content of pre in markdown

1 files changed, 5 insertions, 3 deletions

diff --git a/docs/src/ngdoc.js b/docs/src/ngdoc.js
index f1ca8d7e..038dda06 100644
--- a/docs/src/ngdoc.js
+++ b/docs/src/ngdoc.js
@@ -421,9 +421,11 @@ function markdown (text) {
 
   parts.forEach(function(text, i){
     if (text.match(/^<pre>/)) {
-      text = text.
-        replace(/^<pre>/, '<div ng:non-bindable><pre class="brush: js; html-script: true;">').
-        replace(/<\/pre>/, '</pre></div>');
+      text = text.replace(/^<pre>([\s\S]*)<\/pre>/mi, function(_, content){
+        return '<div ng:non-bindable><pre class="brush: js; html-script: true;">' +
+                content.replace(/</g, '&lt;').replace(/>/g, '&gt;') +
+               '</pre></div>';
+      });
     } else {
       text = text.replace(/<angular\/>/gm, '<tt>&lt;angular/&gt;</tt>');
       text = new Showdown.converter().makeHtml(text.replace(/^#/gm, '###'));