refactor(@angular/build): incomplete string escaping or encoding

See: https://github.com/angular/angular-cli/security/code-scanning/77
angular · Oct 1, 2024 · 475340a · 475340a
1 parent ef1907f
commit 475340a
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/packages/angular/build/src/utils/server-rendering/manifest.ts b/packages/angular/build/src/utils/server-rendering/manifest.ts
@@ -26,6 +26,7 @@ const MAIN_SERVER_OUTPUT_FILENAME = 'main.server.mjs';
 const UNSAFE_CHAR_MAP: Record<string, string> = {
   '`': '\\`',
   '$': '\\$',
+  '\\': '\\\\',
 };
 
 /**
@@ -36,7 +37,7 @@ const UNSAFE_CHAR_MAP: Record<string, string> = {
  * @returns The escaped string where unsafe characters are replaced.
  */
 function escapeUnsafeChars(str: string): string {
-  return str.replace(/[$`]/g, (c) => UNSAFE_CHAR_MAP[c]);
+  return str.replace(/[$`\\]/g, (c) => UNSAFE_CHAR_MAP[c]);
 }
 
 /**