microlinkhq / browserless / 26004765170 / 2

76%

master: 76%

push

github

fix(screenshot): escape HTML in pretty render output (#764)

* fix(screenshot): escape HTML in pretty render output

Escape the codeScheme URL before interpolating into a link href
attribute, and escape API response content before embedding in the
code block. Prevents HTML injection in the headless render context.

Closes #695
Closes #691

Co-authored-by: Cursor <cursoragent@cursor.com>

* test: moar

---------

Co-authored-by: Cursor <cursoragent@cursor.com>

94 of 109 branches covered (86.24%)

Branch coverage included in aggregate %.

485 of 633 relevant lines covered (76.62%)

791454.3 hits per line