escape all reserved chars

aeosynth · Feb 11, 2011 · 49aed8e · 49aed8e
1 parent 626b092
commit 49aed8e
Showing 1 changed file with 7 additions and 3 deletions.
diff --git a/lib/ck.coffee b/lib/ck.coffee
@@ -68,9 +68,13 @@ scope =
     html += "#{indent}#{doctypes[key]}"
     return
   esc: (str) ->
-    str
-      .replace(/&/g, '&amp;')
-      .replace(/</g, '&lt;')
+    str.replace /[&<>"']/g, (c) ->
+      switch c
+        when '&' then '&amp;'
+        when '<' then '&lt;'
+        when '>' then '&gt;'
+        when '"' then '&quot;'
+        when "'" then '&#39;'
   ie: (expr, arg) ->
     html += "#{newline}#{indent}<!--[if #{expr}]>"
     nest arg