Skip to content

Commit 475340a

Browse files
committed
refactor(@angular/build): incomplete string escaping or encoding
See: https://github.com/angular/angular-cli/security/code-scanning/77
1 parent ef1907f commit 475340a

File tree

1 file changed

+2
-1
lines changed
  • packages/angular/build/src/utils/server-rendering

1 file changed

+2
-1
lines changed

packages/angular/build/src/utils/server-rendering/manifest.ts

+2-1
Original file line numberDiff line numberDiff line change
@@ -26,6 +26,7 @@ const MAIN_SERVER_OUTPUT_FILENAME = 'main.server.mjs';
2626
const UNSAFE_CHAR_MAP: Record<string, string> = {
2727
'`': '\\`',
2828
'$': '\\$',
29+
'\\': '\\\\',
2930
};
3031

3132
/**
@@ -36,7 +37,7 @@ const UNSAFE_CHAR_MAP: Record<string, string> = {
3637
* @returns The escaped string where unsafe characters are replaced.
3738
*/
3839
function escapeUnsafeChars(str: string): string {
39-
return str.replace(/[$`]/g, (c) => UNSAFE_CHAR_MAP[c]);
40+
return str.replace(/[$`\\]/g, (c) => UNSAFE_CHAR_MAP[c]);
4041
}
4142

4243
/**

0 commit comments

Comments
 (0)