fix: consistent and likely safer regex escaping

app/composables/useMarkdown.ts

@@ -45,10 +45,8 @@ function stripAndEscapeHtml(text: string, packageName?: string): string {
     stripped = stripped.trim()
     // Collapse multiple whitespace into single space
     stripped = stripped.replace(/\s+/g, ' ')
-    // Escape special regex characters in package name
-    const escapedName = packageName.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')
     // Match package name at the start, optionally followed by: space, dash, colon, hyphen, or just space
-    const namePattern = new RegExp(`^${escapedName}\\s*[-:—]?\\s*`, 'i')
+    const namePattern = new RegExp(`^${RegExp.escape(packageName)}\\s*[-:—]?\\s*`, 'i')
     stripped = stripped.replace(namePattern, '').trim()
   }
 

app/composables/useStructuredFilters.ts

@@ -412,7 +412,9 @@ export function useStructuredFilters(options: UseStructuredFiltersOptions) {
 
   function removeKeyword(keyword: string) {
     filters.value.keywords = filters.value.keywords.filter(k => k !== keyword)
-    const newQ = searchQuery.value.replace(new RegExp(`keyword:${keyword}($| )`, 'g'), '').trim()
+    const newQ = searchQuery.value
+      .replace(new RegExp(`keyword:${RegExp.escape(keyword)}($| )`, 'g'), '')
+      .trim()
     router.replace({ query: { ...route.query, q: newQ || undefined } })
     if (searchQueryModel) searchQueryModel.value = newQ
   }

global.d.ts

@@ -0,0 +1,9 @@
+declare global {
+  interface RegExpConstructor {
+    escape(str: string): string
+  }
+}
+
+// required for the global type to work
+// oxlint-disable-next-line eslint-plugin-unicorn(require-module-specifiers)
+export {}

knip.ts

@@ -55,6 +55,7 @@ const config: KnipConfig = {
         'h3-next',
       ],
       ignoreUnresolved: ['#components', '#oauth/config'],
+      ignoreFiles: ['global.d.ts'],
     },
     'cli': {
       project: ['src/**/*.ts!', '!src/mock-*.ts'],

nuxt.config.ts

@@ -203,7 +203,7 @@ export default defineNuxtConfig({
     },
     typescript: {
       tsConfig: {
-        include: ['../test/unit/server/**/*.ts'],
+        include: ['../test/unit/server/**/*.ts', '../global.d.ts'],
       },
     },
   },
@@ -287,10 +287,10 @@ export default defineNuxtConfig({
           '#cli/*': ['../cli/src/*'],
         },
       },
-      include: ['../test/unit/app/**/*.ts'],
+      include: ['../test/unit/app/**/*.ts', '../global.d.ts'],
     },
     sharedTsConfig: {
-      include: ['../test/unit/shared/**/*.ts'],
+      include: ['../test/unit/shared/**/*.ts', '../global.d.ts'],
     },
     nodeTsConfig: {
       compilerOptions: {
@@ -301,7 +301,7 @@ export default defineNuxtConfig({
           '#shared/*': ['../shared/*'],
         },
       },
-      include: ['../*.ts', '../test/e2e/**/*.ts'],
+      include: ['../*.ts', '../test/e2e/**/*.ts', '../global.d.ts'],
     },
   },
 

shared/utils/emoji.ts

@@ -1907,7 +1907,7 @@ const emojis = {
 
 const emojisKeysRegex = new RegExp(
   Object.keys(emojis)
-    .map(key => `:${key}:`)
+    .map(key => `:${RegExp.escape(key)}:`)
     .join('|'),
   'g',
 )