From c38ce0e0d97b320fbd9a3862cafd4bdaff4fc8d2 Mon Sep 17 00:00:00 2001 From: Daniel Roe Date: Sun, 2 Mar 2025 19:34:15 +0000 Subject: [PATCH] fix(ui-templates): escape inline scripts correctly in ui templates --- packages/ui-templates/lib/render.ts | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/packages/ui-templates/lib/render.ts b/packages/ui-templates/lib/render.ts index a48039182a..b23089d1f7 100644 --- a/packages/ui-templates/lib/render.ts +++ b/packages/ui-templates/lib/render.ts @@ -160,8 +160,8 @@ export const RenderPlugin = () => { `const props = defineProps(${props})`, title && 'useHead(' + genObjectFromRawEntries([ ['title', `\`${title}\``], - ['script', inlineScripts.map(s => ({ children: `\`${s}\`` }))], - ['style', [{ children: `\`${globalStyles}\`` }]], + ['script', inlineScripts.map(s => ({ children: `\`${s.replace(/[`$]/g, '\\$&')}\`` }))], + ['style', [{ children: `\`${globalStyles.replace(/[`$]/g, '\\$&')}\`` }]], ]) + ')', '', '