microlinkhq / browserless / 26004765170

76%

push

github

fix(screenshot): escape HTML in pretty render output (#764)

* fix(screenshot): escape HTML in pretty render output

Escape the codeScheme URL before interpolating into a link href
attribute, and escape API response content before embedding in the
code block. Prevents HTML injection in the headless render context.

Closes #695
Closes #691

Co-authored-by: Cursor <cursoragent@cursor.com>

* test: moar

---------

Co-authored-by: Cursor <cursoragent@cursor.com>

372 of 456 branches covered (81.58%)

Branch coverage included in aggregate %.

9 of 11 new or added lines in 2 files covered. (81.82%)

1944 of 2643 relevant lines covered (73.55%)

189560.17 hits per line