This project is archived and is in readonly mode.

TagHelper#escape_once does not recognize &#xHH;

#1073

old:

   def escape_once(html)
    html.to_s.gsub(/[\"><]|&(?!([a-zA-Z]+|(#\d+));)/) { |special| ERB::Util::HTML_ESCAPE[special] }
  end

new:

  def escape_once(html)
    html.to_s.gsub(/[\"><]|&(?!(?:[a-zA-Z]+|#\d+|#x[\dA-Fa-f]+);)/) { |special| ERB::Util::HTML_ESCAPE[special] }
  end

Reported by apeiros · September 18th, 2008 @ 11:42 PM