LibWeb: Escape "<" and ">" when serializing attribute values

Gingeh · Gingeh · commit 5a07aa21af15 · 2025-05-22T16:20:29.000+10:00
See whatwg/html#6362
diff --git a/Libraries/LibWeb/HTML/Parser/HTMLParser.cpp b/Libraries/LibWeb/HTML/Parser/HTMLParser.cpp
@@ -4698,14 +4698,15 @@ static String escape_string(StringView string, AttributeMode attribute_mode)
         // 2. Replace any occurrences of the U+00A0 NO-BREAK SPACE character by the string "&nbsp;".
         else if (code_point == 0xA0)
             builder.append("&nbsp;"sv);
-        // 3. If the algorithm was invoked in the attribute mode, replace any occurrences of the """ character by the string "&quot;".
-        else if (code_point == '"' && attribute_mode == AttributeMode::Yes)
-            builder.append("&quot;"sv);
-        // 4. If the algorithm was not invoked in the attribute mode, replace any occurrences of the "<" character by the string "&lt;", and any occurrences of the ">" character by the string "&gt;".
-        else if (code_point == '<' && attribute_mode == AttributeMode::No)
+        // 3. Replace any occurrences of the "<" character by the string "&lt;".
+        else if (code_point == '<')
             builder.append("&lt;"sv);
-        else if (code_point == '>' && attribute_mode == AttributeMode::No)
+        // 4. Replace any occurrences of the ">" character by the string "&gt;".
+        else if (code_point == '>')
             builder.append("&gt;"sv);
+        // 5. If the algorithm was invoked in the attribute mode, then replace any occurrences of the """ character by the string "&quot;".
+        else if (code_point == '"' && attribute_mode == AttributeMode::Yes)
+            builder.append("&quot;"sv);
         else
             builder.append_code_point(code_point);
     }
