Escape HTML for more data (#573)

* More html examples

* Escape function name

* Escape native objects display

Author: Guillaume Chau

shells/dev/target/NativeTypes.vue

@@ -77,7 +77,9 @@ export default {
       largeArray: [],
       i: new Set([1, 2, 3, 4, new Set([5, 6, 7, 8]), new Map([[1, 2], [3, 4], [5, new Map([[6, 7]])]])]),
       j: new Map([[1, 2], [3, 4], [5, new Map([[6, 7]])], [8, new Set([1, 2, 3, 4, new Set([5, 6, 7, 8]), new Map([[1, 2], [3, 4], [5, new Map([[6, 7]])]])])]]),
-      html: '<b>Bold</b> <i>Italic</i>'
+      html: '<b>Bold</b> <i>Italic</i>',
+      htmlReg: /<b>hey<\/b>/i,
+      'html <b>key</b>': (h, t, m, l) => {}
     }
   },
   computed: {

src/devtools/components/DataField.vue

@@ -280,11 +280,11 @@ export default {
       } else if (this.valueType === 'plain-object') {
         return 'Object' + (Object.keys(value).length ? '' : ' (empty)')
       } else if (this.valueType.includes('native')) {
-        return specialTypeRE.exec(value)[2]
+        return escape(specialTypeRE.exec(value)[2])
       } else if (typeof value === 'string') {
         var typeMatch = value.match(rawTypeRE)
         if (typeMatch) {
-          return typeMatch[1]
+          return escape(typeMatch[1])
         } else {
           return `<span>"</span>${escape(value)}<span>"</span>`
         }

src/util.js

@@ -236,7 +236,7 @@ export function getCustomFunctionDetails (func) {
   return {
     _custom: {
       type: 'function',
-      display: `<span>ƒ</span> ${func.name}${args}`
+      display: `<span>ƒ</span> ${escape(func.name)}${args}`
     }
   }
 }