Merge pull request #38 from gentlementlegen/fix/escape-html

fix: escaping ampersand and backtick characters
ubiquibot · Jun 7, 2024 · 6c2a91a · 6c2a91a
2 parents 1ac4959 + 8f791cb
commit 6c2a91a
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/src/handlers/issue/generate-permits.ts b/src/handlers/issue/generate-permits.ts
@@ -243,7 +243,13 @@ function generateDetailsTable(totals: TotalsById) {
 
         const commentUrl = commentSource.comment.html_url;
         const truncatedBody = commentSource
-          ? commentSource.comment.body.replaceAll("<", "&lt;").replaceAll(">", "&gt;").substring(0, 64).concat("...")
+          ? commentSource.comment.body
+              .replaceAll("&", "&amp;")
+              .replaceAll("<", "&lt;")
+              .replaceAll(">", "&gt;")
+              .replaceAll("`", "&#96;")
+              .substring(0, 64)
+              .concat("...")
           : "";
         const formatScoreDetails = commentScore.formatScoreCommentDetails;