microlinkhq / browserless / 26004765170 / 4

76%

master: 76%

push

github

fix(screenshot): escape HTML in pretty render output (#764)

* fix(screenshot): escape HTML in pretty render output

Escape the codeScheme URL before interpolating into a link href
attribute, and escape API response content before embedding in the
code block. Prevents HTML injection in the headless render context.

Closes #695
Closes #691

Co-authored-by: Cursor <cursoragent@cursor.com>

* test: moar

---------

Co-authored-by: Cursor <cursoragent@cursor.com>

8 of 11 branches covered (72.73%)

Branch coverage included in aggregate %.

38 of 38 relevant lines covered (100.0%)

2.76 hits per line