Fix CSS content escape

1 files changed, 8 insertions, 1 deletions

diff --git a/index.js b/index.js
index 563095b..dae7762 100644
--- a/index.js
+++ b/index.js
@@ -315,7 +315,7 @@ function renderEvent({type, userId: eventUserId, args}, {userId: currentUserId,
             }
 
             & .content::before {
-              content: '${args.content.replace(/' /g, "\\27\\ ").replace(/'/g, "\\27")}';
+              content: '${sanitizeCSSContent(args.content)}';
             }
 
             & .content::after {
@@ -400,3 +400,10 @@ function sanitizeText(str) {
     .replace(/"/g, '"')
     .replace(/'/g, ''')
 }
+
+function sanitizeCSSContent(str) {
+  return str
+    .replace(/\\/g, '\\\\')
+    .replace(/' /g, "\\27\\ ")
+    .replace(/'/g, "\\27")
+}