Merge pull request #236747 from mjbvz/above-asp

Fix escaping of raw values that contain `&` in md preview
microsoft · Dec 20, 2024 · f092379 · f092379
2 parents b9f07f1 + 7cf9dbe
commit f092379
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/extensions/markdown-language-features/src/util/dom.ts b/extensions/markdown-language-features/src/util/dom.ts
@@ -5,7 +5,10 @@
 import * as vscode from 'vscode';
 
 export function escapeAttribute(value: string | vscode.Uri): string {
-	return value.toString().replace(/"/g, '&quot;');
+	return value.toString()
+		.replace(/&/g, '&amp;')
+		.replace(/"/g, '&quot;')
+		.replace(/'/g, '&#39;');
 }
 
 export function getNonce() {