Merge branch 'quote-escaping-fix' of https://github.com/matias-la/anser…

… into new-version
IonicaBizau · Feb 2, 2022 · 34c0014 · 34c0014
2 parents cc8eb53 + a9d7ae3
commit 34c0014
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/lib/index.js b/lib/index.js
@@ -178,8 +178,9 @@ class Anser {
      * @returns {String} The escpaed HTML output.
      */
     escapeForHtml (txt) {
-        return txt.replace(/[&<>]/gm, str =>
+        return txt.replace(/[&<>\"]/gm, str =>
                            str == "&" ? "&amp;" :
+                               str == '"' ? "&quot;" :
                                str == "<" ? "&lt;" :
                                str == ">" ? "&gt;" : ""
                           );