escape all url entities

YGGverse · Apr 16, 2024 · f12ff02 · f12ff02
1 parent 3d86054
commit f12ff02
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/src/Pango.php b/src/Pango.php
@@ -166,7 +166,9 @@ public static function fromGemtextBody(
                 {
                     $lines[$index] = sprintf(
                         '<a href="%s">%s</a>',
-                        $address,
+                        self::escape(
+                            $address
+                        ),
                         self::escape(
                             $alt
                         )
@@ -177,7 +179,9 @@ public static function fromGemtextBody(
                 {
                     $lines[$index] = sprintf(
                         '<a href="%s" title="%s">%s</a>',
-                        $address,
+                        self::escape(
+                            $address
+                        ),
                         self::escape(
                             urldecode(
                                 $address