eliott/ladybird
1
0
Fork 0
mirror of https://github.com/LadybirdBrowser/ladybird synced 2026-04-27 18:17:22 +02:00
Code Issues Packages Projects Releases Wiki Activity

LibWeb: Escape "<" and ">" when serializing attribute values

Browse Source 
See https://github.com/whatwg/html/pull/6362
This commit is contained in:
Gingeh
2025-05-22 14:53:53 +10:00
committed by Sam Atkins
parent fbc56f74bd
commit f1eaecc630
Notes: github-actions[bot] 2025-05-22 06:56:41 +00:00 
Author: https://github.com/Gingeh
Commit: https://github.com/LadybirdBrowser/ladybird/commit/f1eaecc6302
Pull-request: https://github.com/LadybirdBrowser/ladybird/pull/4839
Reviewed-by: https://github.com/AtkinsSJ ✅
1 changed files with 7 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
Libraries/LibWeb/HTML/Parser/HTMLParser.cpp
View File

@@ -4698,14 +4698,15 @@ static String escape_string(StringView string, AttributeMode attribute_mode)
// 2. Replace any occurrences of the U+00A0 NO-BREAK SPACE character by the string "&nbsp;".
else if (code_point == 0xA0)
builder.append("&nbsp;"sv);
// 3. If the algorithm was invoked in the attribute mode, replace any occurrences of the """ character by the string "&quot;".
// 3. Replace any occurrences of the "<" character by the string "&lt;".
else if (code_point == '<')
builder.append("&lt;"sv);
// 4. Replace any occurrences of the ">" character by the string "&gt;".
else if (code_point == '>')
builder.append("&gt;"sv);
// 5. If the algorithm was invoked in the attribute mode, then replace any occurrences of the """ character by the string "&quot;".
else if (code_point == '"' && attribute_mode == AttributeMode::Yes)
builder.append("&quot;"sv);
// 4. If the algorithm was not invoked in the attribute mode, replace any occurrences of the "<" character by the string "&lt;", and any occurrences of the ">" character by the string "&gt;".
else if (code_point == '<' && attribute_mode == AttributeMode::No)
builder.append("&lt;"sv);
else if (code_point == '>' && attribute_mode == AttributeMode::No)
builder.append("&gt;"sv);
else
builder.append_code_point(code_point);
}