Better escaping of code to prevent xss

src/components/Config.svelte

@@ -13,7 +13,6 @@ import 'monaco-editor/esm/vs/editor/browser/controller/coreCommands.js';
 import 'monaco-editor/esm/vs/editor/contrib/find/findController.js';
 import * as monaco from 'monaco-editor/esm/vs/editor/editor.api.js';
 
-export let data;
 export let conf = '';
 export let code = '';
 export let error = false;
@@ -93,9 +92,6 @@ onMount(async () => {
 	}
 });
 
-	export let name;
-	export let params = {};
-	export let errorText = ''
 </script>
 
 <style>

src/components/Editor.svelte

@@ -12,7 +12,6 @@ import 'monaco-editor/esm/vs/editor/browser/controller/coreCommands.js';
 import 'monaco-editor/esm/vs/editor/contrib/find/findController.js';
 import * as monaco from 'monaco-editor/esm/vs/editor/editor.api.js';
 
-export let data;
 export let code = '';
 export let conf = { theme: 'default' };
 let edit;
@@ -96,8 +95,8 @@ onMount(async () => {
 	}
 });
 
-	export let name;
-	export let params = {};
+	// export let name;
+	// export let params = {};
 </script>
 
 <style>

src/components/Error.svelte

@@ -5,14 +5,14 @@ import { onMount } from 'svelte';
 onMount(async () => {
 });
 
-	export let code = '';
+	// export let code = '';
 	export let classes = '';
 
-	export let error = {};
-	export let token = '';
-	export let expected = '';
+	// export let error = {};
+	// export let token = '';
+	// export let expected = '';
 
-	export let params = {}
+	// export let params = {}
 	export let errorText = '';
 
 

src/components/Tag.svelte

@@ -1,5 +1,4 @@
 <script>
-	export let title = '';
 	export let noPadding = false;
 	let contentClass = 'padding';
 	if (noPadding) {

src/components/View.svelte

@@ -70,7 +70,15 @@ let insertSvg = function(svgCode, bindFunctions){
 		try {
 			if(container && state) {
 				code = state.code;
-				container.innerHTML = code;
+
+      // mermaid.parse(code)
+      // Replacing special characters '<' and '>' with encoded '&lt;' and '&gt;'
+      let _code = code
+      _code = _code.replace(/</g, '&lt;')
+      _code = _code.replace(/>/g, '&gt;')
+
+
+				container.innerHTML = _code;
 				saveStatistcs(detectType(code));
 				delete container.dataset.processed
 				mermaid.initialize(state.mermaid)