Closed jbrichau closed 1 year ago
There’s a note in section ‘4.12.1.3 Restrictions for contents of script elements’ in the HTML Living Standard which recommends escaping <!--
and <script
as well. The following snippet is based on the example in the section, the page does not show ‘Test Paragraph’ as would be expected:
FileLocator imageDirectory / 'Test.html' writeStreamDo: [ :stream |
WAHtmlCanvas builder fullDocument: true;
render: [ :html |
html
script: (html logger log: '<!-- <script>');
paragraph: 'Test Paragraph' ]
on: stream ]
@Rinzwind Good point. I moved your comment to the issue tracker since it requires a bit more work than to re-introduce the default escaping of all closing tags. To fix the issue, that should suffice but I consider it a temporary fix while we work on following that advice in the link.
All modified lines are covered by tests :white_check_mark:
Comparison is base (
b2d5425
) 48.67% compared to head (fe070af
) 48.67%.
:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.
Fixes #1379