HTML escaping

adaptlearning · Nov 12, 2024 · 28ac5b5 · 28ac5b5
1 parent c485c8a
commit 28ac5b5
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/grunt/helpers/Translate.js b/grunt/helpers/Translate.js
@@ -196,11 +196,13 @@ class Translate {
 ${Object.entries(outputGroupedByFile).map(([fileName, entries]) => {
     return ` <file id="${fileName}">
 ${entries.map(item => {
-    if (/[<>]+/.test(item.value)) return null;
+    const value = /[<>&"'/]/.test(item.value)
+      ? `<![CDATA[${item.value}]]>`
+      : item.value;
     return `    <unit id="${item.id}${item.path}">
       <segment>
-        <source xml:space="preserve">${item.value}</source>
-        <target xml:space="preserve">${item.value}</target>
+        <source xml:space="preserve">${value}</source>
+        <target xml:space="preserve">${value}</target>
       </segment>
     </unit>
 `;