From a0f51eee74e70d6a6598657d82f3e4a6b8f63052 Mon Sep 17 00:00:00 2001
From: YouWei Zhao <zhao.uv@gmail.com>
Date: Mon, 18 May 2020 20:10:49 +0800
Subject: [PATCH] fix escape

---
 _server/MotaActionParse.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/_server/MotaActionParse.js b/_server/MotaActionParse.js
index b75a0331..fd08d8f2 100644
--- a/_server/MotaActionParse.js
+++ b/_server/MotaActionParse.js
@@ -1015,7 +1015,7 @@ ActionParser.prototype.matchEvalCompare=function(args, isShadow){
   for (var index = 0,op; op=oplist[index]; index++) {
     var match=new RegExp('(?<= )'+(op=='||'?'\\|\\|':op)+'(?= )').exec(str)
     if (!match) continue;
-    args=[this.expandEvalBlock([raw.slice(0,match.index)],isShadow),(op=='&&'?'&amp;&amp;':op),this.expandEvalBlock([raw.slice(match.index+op.length)],isShadow)]
+    args=[this.expandEvalBlock([raw.slice(0,match.index)],isShadow),op.replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;'),this.expandEvalBlock([raw.slice(match.index+op.length)],isShadow)]
     return {ret:true,xml:xml,args:args}
   }
   return {ret:false}