From 7bf526e6c44fb95894dae18ee7c2c70074fd1c8d Mon Sep 17 00:00:00 2001 From: Ashelyn Rose Date: Sat, 10 May 2025 21:05:49 -0600 Subject: Fix CSS content escape --- index.js | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/index.js b/index.js index 563095b..dae7762 100644 --- a/index.js +++ b/index.js @@ -315,7 +315,7 @@ function renderEvent({type, userId: eventUserId, args}, {userId: currentUserId, } & .content::before { - content: '${args.content.replace(/' /g, "\\27\\ ").replace(/'/g, "\\27")}'; + content: '${sanitizeCSSContent(args.content)}'; } & .content::after { @@ -400,3 +400,10 @@ function sanitizeText(str) { .replace(/"/g, '"') .replace(/'/g, ''') } + +function sanitizeCSSContent(str) { + return str + .replace(/\\/g, '\\\\') + .replace(/' /g, "\\27\\ ") + .replace(/'/g, "\\27") +} -- cgit 1.4.1