Whoops!

In some circumstances, the new Sanitizer was double-escaping text nodes. Fixed (with unit test).
2008-05-21 14:14:43 -05:00 · 2008-05-21 14:14:43 -05:00 · f6508de6dd
commit f6508de6dd
parent 45405fc97e
4 changed files with 20 additions and 9 deletions
--- a/lib/stringsupport.rb
+++ b/lib/stringsupport.rb
@ -2214,7 +2214,9 @@ class String
    def escapeHTML
            self.gsub( /&/, "&amp;" ).
             gsub( /</, "&lt;" ).
-             gsub( />/, "&gt;" )
+             gsub( />/, "&gt;" ).
+             gsub(/'/, "&apos;" ).
+             gsub(/"/, "&quot;" )
    end
    
    def unescapeHTML
@ -2224,6 +2226,8 @@ class String
      when /\Aamp\z/ni           then '&'
      when /\Agt\z/ni            then '>'
      when /\Alt\z/ni            then '<'
+      when /\Aquot\z/ni            then '"'
+      when /\Aapos\z/ni            then "'"
      when /\A#0*(\d+)\z/n       then
        if Integer($1) < 256
          Integer($1).chr