diff --git a/src/L.Control.MousePosition.js b/src/L.Control.MousePosition.js index 656bc78..543ae68 100644 --- a/src/L.Control.MousePosition.js +++ b/src/L.Control.MousePosition.js @@ -27,9 +27,16 @@ L.Control.MousePosition = L.Control.extend({ var lat = this.options.latFormatter ? this.options.latFormatter(e.latlng.lat) : L.Util.formatNum(e.latlng.lat, this.options.numDigits); var value = this.options.lngFirst ? lng + this.options.separator + lat : lat + this.options.separator + lng; var prefixAndValue = this.options.prefix + ' ' + value; - this._container.innerHTML = prefixAndValue; - } - + this._container.innerHTML = this._encode(prefixAndValue); + }, + _encode: function (str) { + return String(str) 35 .replace(/&/g, '&') + .replace(//g, '>') + .replace(/"/g, '"') + .replace(/&/g, "&") + .replace(/"/g, """); + }, }); L.Map.mergeOptions({