{"action":"created","issue":{"url":"https://api.github.com/repos/graphql/graphiql/issues/74","labels_url":"https://api.github.com/repos/graphql/graphiql/issues/74/labels{/name}","comments_url":"https://api.github.com/repos/graphql/graphiql/issues/74/comments","events_url":"https://api.github.com/repos/graphql/graphiql/issues/74/events","html_url":"https://github.com/graphql/graphiql/issues/74","id":123053512,"number":74,"title":"HTML embedded in description field is not escaped","user":{"login":"runeh","id":64223,"avatar_url":"https://avatars.githubusercontent.com/u/64223?v=3","gravatar_id":"","url":"https://api.github.com/users/runeh","html_url":"https://github.com/runeh","followers_url":"https://api.github.com/users/runeh/followers","following_url":"https://api.github.com/users/runeh/following{/other_user}","gists_url":"https://api.github.com/users/runeh/gists{/gist_id}","starred_url":"https://api.github.com/users/runeh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/runeh/subscriptions","organizations_url":"https://api.github.com/users/runeh/orgs","repos_url":"https://api.github.com/users/runeh/repos","events_url":"https://api.github.com/users/runeh/events{/privacy}","received_events_url":"https://api.github.com/users/runeh/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-12-19T01:44:16Z","updated_at":"2016-01-27T20:45:35Z","closed_at":null,"body":"Steps to reproduce\r\n\r\n- Define a graphql type with a description field that contains markup. For example `<input type=\"checkbox\">`\r\n- Inspect the type in docs panel in graphiql\r\n\r\nExpected behaviour\r\n\r\n- The string `<input type=\"checkbox\">` is shown in docs panel\r\n\r\nActual behaviour\r\n\r\n- A checkbox is shown in the docs panel\r\n\r\n![screenshot 2015-12-19 02 39 57](https://cloud.githubusercontent.com/assets/64223/11910571/f7040820-a5f9-11e5-8875-e2faf28c4b62.png)\r\n\r\nAs far as I can tell, it's just a matter of adding `{sanitize: true}` as a config option when calling the `marked` function.\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/graphql/graphiql/issues/comments/175845227","html_url":"https://github.com/graphql/graphiql/issues/74#issuecomment-175845227","issue_url":"https://api.github.com/repos/graphql/graphiql/issues/74","id":175845227,"user":{"login":"asiandrummer","id":1537569,"avatar_url":"https://avatars.githubusercontent.com/u/1537569?v=3","gravatar_id":"","url":"https://api.github.com/users/asiandrummer","html_url":"https://github.com/asiandrummer","followers_url":"https://api.github.com/users/asiandrummer/followers","following_url":"https://api.github.com/users/asiandrummer/following{/other_user}","gists_url":"https://api.github.com/users/asiandrummer/gists{/gist_id}","starred_url":"https://api.github.com/users/asiandrummer/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/asiandrummer/subscriptions","organizations_url":"https://api.github.com/users/asiandrummer/orgs","repos_url":"https://api.github.com/users/asiandrummer/repos","events_url":"https://api.github.com/users/asiandrummer/events{/privacy}","received_events_url":"https://api.github.com/users/asiandrummer/received_events","type":"User","site_admin":false},"created_at":"2016-01-27T20:45:35Z","updated_at":"2016-01-27T20:45:35Z","body":"Added sanitizing option to DocExplorer"}}