fix: attribute escape

searchfe · Jan 27, 2021 · 8f4124f · 8f4124f
1 parent d021bce
commit 8f4124f
Show file tree

Hide file tree

Showing 3 changed files with 24 additions and 18 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -74,8 +74,8 @@
     "eslint-plugin-promise": "^4.2.1",
     "eslint-plugin-standard": "^4.0.1",
     "jest": "^26.2.2",
-    "san-html-cases": "^3.10.5",
-    "san-ssr": "^4.4.0",
+    "san-html-cases": "^3.10.8",
+    "san-ssr": "^4.4.1",
     "semantic-release": "^17.1.1",
     "typedoc": "^0.17.8",
     "wdio-sauce-service": "^0.4.14",
@@ -94,7 +94,7 @@
     "yargs": "^15.4.1"
   },
   "peerDependencies": {
-    "san-ssr": "^4.4.0"
+    "san-ssr": "^4.4.1"
   },
   "release": {
     "branch": "master",

diff --git a/runtime/underscore.php b/runtime/underscore.php
@@ -112,6 +112,12 @@ public static function toString($source) {
         return strval($source);
     }
 
+    public static function escapeHTML($source)
+    {
+        if (!is_string($source)) return $source;
+        return htmlspecialchars($source, ENT_QUOTES);
+    }
+
     public static function output($source, $needEscape)
     {
         if (!isset($source)) return "";