From 39c2b0a2c4b35e0e68480d526e3af8c44a166c2e Mon Sep 17 00:00:00 2001 From: Daniel Roe Date: Sun, 2 Mar 2025 19:34:15 +0000 Subject: [PATCH] fix(ui-templates): escape inline scripts correctly in ui templates --- packages/ui-templates/lib/render.ts | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/packages/ui-templates/lib/render.ts b/packages/ui-templates/lib/render.ts index 9f251b8303..e27667397d 100644 --- a/packages/ui-templates/lib/render.ts +++ b/packages/ui-templates/lib/render.ts @@ -157,8 +157,8 @@ export const RenderPlugin = () => { `const props = defineProps(${props})`, title && 'useHead(' + genObjectFromRawEntries([ ['title', `\`${title}\``], - ['script', inlineScripts.map(s => ({ children: `\`${s}\`` }))], - ['style', [{ children: `\`${globalStyles}\`` }]], + ['script', inlineScripts.map(s => ({ children: `\`${s.replace(/[`$]/g, '\\$&')}\`` }))], + ['style', [{ children: `\`${globalStyles.replace(/[`$]/g, '\\$&')}\`` }]], ]) + ')', '', '