From f50d25c5985087bd37d0a62a6570746ba1c81af4 Mon Sep 17 00:00:00 2001
From: StefanVukovic99 <stefanvukovic44@gmail.com>
Date: Thu, 6 Jun 2024 01:11:34 +0200
Subject: escape dictionary name for dynamic handlebars (#1032)

* escape apostrophe in dict name for dynamic handlebars

* try handling backslashes
---
 ext/js/data/anki-template-util.js | 16 +++++++++++++---
 1 file changed, 13 insertions(+), 3 deletions(-)

(limited to 'ext/js')

diff --git a/ext/js/data/anki-template-util.js b/ext/js/data/anki-template-util.js
index 0051e3b5..68369fc9 100644
--- a/ext/js/data/anki-template-util.js
+++ b/ext/js/data/anki-template-util.js
@@ -108,15 +108,15 @@ export function getDynamicTemplates(options) {
         if (!dictionary.enabled) { continue; }
         dynamicTemplates += `
 {{#*inline "single-glossary-${getKebabCase(dictionary.name)}"}}
-    {{~> glossary selectedDictionary='${dictionary.name}'}}
+    {{~> glossary selectedDictionary='${escapeDictName(dictionary.name)}'}}
 {{/inline}}
 
 {{#*inline "single-glossary-${getKebabCase(dictionary.name)}-no-dictionary"}}
-    {{~> glossary selectedDictionary='${dictionary.name}' noDictionaryTag=true}}
+    {{~> glossary selectedDictionary='${escapeDictName(dictionary.name)}' noDictionaryTag=true}}
 {{/inline}}
 
 {{#*inline "single-glossary-${getKebabCase(dictionary.name)}-brief"}}
-    {{~> glossary selectedDictionary='${dictionary.name}' brief=true}}
+    {{~> glossary selectedDictionary='${escapeDictName(dictionary.name)}' brief=true}}
 {{/inline}}
 `;
     }
@@ -148,3 +148,13 @@ function getKebabCase(str) {
         .replace(/^-|-$/g, '')
         .toLowerCase();
 }
+
+/**
+ * @param {string} name
+ * @returns {string}
+ */
+function escapeDictName(name) {
+    return name
+        .replace(/\\/g, '\\\\')
+        .replace(/'/g, '\\\'');
+}
-- 
cgit v1.2.3