fix(plugin-helper): escape case insensitive javascript: attrs

2026-06-11 18:02:26 +03:00 · 2020-07-08 19:34:12 +02:00
parent fe6a16b6d9
commit 5ceb2f0fa4
2 changed files with 7 additions and 1 deletions
@@ -34,7 +34,7 @@ const escapeHTML = (value) => value
  .replace(/"/g, '&quot;')
  .replace(/'/g, '&#039;')
  // eslint-disable-next-line no-script-url
-  .replace('javascript:', 'javascript%3A');
+  .replace(/(javascript):/gi, '$1%3A');

 /**
 * Acept name and value and return valid html5 attribute string