Skip to content

Commit 84de714

Browse files
ochafikclaude
andcommitted
fix: escape backslashes in description strings (CodeQL alert)
Properly escape backslashes before escaping quotes to prevent incomplete string escaping in generated .describe() calls. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
1 parent 593c03b commit 84de714

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

scripts/generate-schemas.ts

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1090,8 +1090,8 @@ function addTopLevelDescribe(sourceFile: SourceFile): void {
10901090
// Skip if already has .describe() at the end
10911091
if (/\.describe\([^)]+\)\s*$/.test(currentText)) continue;
10921092

1093-
// Escape quotes in description
1094-
const escapedDesc = descText.replace(/'/g, "\\'").replace(/\n/g, ' ');
1093+
// Escape backslashes first, then quotes and newlines
1094+
const escapedDesc = descText.replace(/\\/g, '\\\\').replace(/'/g, "\\'").replace(/\n/g, ' ');
10951095

10961096
// Add .describe() to the schema
10971097
decl.setInitializer(`${currentText}.describe('${escapedDesc}')`);

0 commit comments

Comments
 (0)