fix(ui): escape special characters in description (npmx-dev#1582)

radosvet93 · alex-key · commit adcc46606d87 · 2026-02-25T21:20:37.000Z
diff --git a/app/components/Compare/PackageSelector.vue b/app/components/Compare/PackageSelector.vue
@@ -307,7 +307,7 @@ function handleFocus() {
               v-if="result.description"
               class="text-xs text-fg-muted truncate mt-0.5 w-full block"
             >
-              {{ result.description }}
+              {{ decodeHtmlEntities(result.description) }}
             </span>
           </ButtonBase>
         </div>
diff --git a/app/components/Package/TableRow.vue b/app/components/Package/TableRow.vue
@@ -69,7 +69,7 @@ const allMaintainersText = computed(() => {
       v-if="isColumnVisible('description')"
       class="py-2 px-3 text-sm text-fg-muted max-w-xs truncate"
     >
-      {{ pkg.description || '-' }}
+      {{ decodeHtmlEntities(pkg.description || '-') }}
     </td>
 
     <!-- Downloads -->

Original file line number	Diff line number	Diff line change
`@@ -307,7 +307,7 @@ function handleFocus() {`
`307`	`307`	`v-if="result.description"`
`308`	`308`	`class="text-xs text-fg-muted truncate mt-0.5 w-full block"`
`309`	`309`	`>`
`310`		`- {{ result.description }}`
	`310`	`+ {{ decodeHtmlEntities(result.description) }}`
`311`	`311`	`</span>`
`312`	`312`	`</ButtonBase>`
`313`	`313`	`</div>`
Original file line number	Diff line number	Diff line change
`@@ -69,7 +69,7 @@ const allMaintainersText = computed(() => {`
`69`	`69`	`v-if="isColumnVisible('description')"`
`70`	`70`	`class="py-2 px-3 text-sm text-fg-muted max-w-xs truncate"`
`71`	`71`	`>`
`72`		`- {{ pkg.description \|\| '-' }}`
	`72`	`+ {{ decodeHtmlEntities(pkg.description \|\| '-') }}`
`73`	`73`	`</td>`
`74`	`74`
`75`	`75`	`<!-- Downloads -->`