From feab43f16d9ae6ae51c02fab4f1004228804afa5 Mon Sep 17 00:00:00 2001 From: Anthony Dresser Date: Thu, 19 Jul 2018 11:42:29 -0700 Subject: [PATCH] add ' to escape strings for html (#1974) --- src/sql/base/common/strings.ts | 1 + 1 file changed, 1 insertion(+) diff --git a/src/sql/base/common/strings.ts b/src/sql/base/common/strings.ts index 121133862a..4f8151b2b1 100644 --- a/src/sql/base/common/strings.ts +++ b/src/sql/base/common/strings.ts @@ -15,6 +15,7 @@ export function escape(html: string): string { case '>': return '>'; case '&': return '&'; case '"': return '"'; + case '\'': return '''; default: return match; } });