Escape numbered HTML entities

Code by @wavoemployee25
pugjs · May 4, 2012 · b771df5 · b771df5
1 parent 47bab06
commit b771df5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/runtime.js b/lib/runtime.js
@@ -85,7 +85,7 @@ exports.attrs = function attrs(obj, escaped){
 
 exports.escape = function escape(html){
   return String(html)
-    .replace(/&(?!\w+;)/g, '&amp;')
+    .replace(/&(?!(\w+|\#\d+);)/g, '&amp;')
     .replace(/</g, '&lt;')
     .replace(/>/g, '&gt;')
     .replace(/"/g, '&quot;');