DiscourseのOneboxでの「&」のエスケープ

loic · 2026 年 1 月 16 日午前 10:45

その特定の問題に対処するパッチをマージしました（すべてのOneboxで解決されるはずです）：

github.com/discourse/discourse

FIX: Don't escape HTML entities twice in oneboxes

main ← loic/fix-double-escape-onebox

merged 10:40AM - 16 Jan 26 UTC

Flink

+32 -25

Sometimes, HTML entities can be escaped twice, typically when getting sanitized …data from our `Onebox::OpenGraph` class then providing that value to a template. We’re using the Mustache gem to process the Onebox templates, and it will automatically escape HTML entities. This is usually not a problem, but it is for things like ampersands. For example, if the value we provide to the template is `&`, then Mustache will convert it to `&amp;`. This PR fixes that behavior by decoding the result of the sanitization we apply in `Onebox::OpenGraph`. That way, templates will get `&` instead of `&`, thus there won’t be any double escaping.

トピック		返信	表示
One Box url encoding of already encoded comma Bug	4	1113	2019 年 6 月 27 日
Onebox links with ampersands don't encode correctly Bug	2	910	2017 年 9 月 7 日
In onebox, `&` become `&` Support	12	1460	2019 年 5 月 14 日
Weird double escaping of < & > still showing up Bug	2	1080	2016 年 1 月 1 日
Oneboxing changes link URL? Support	6	915	2023 年 7 月 24 日

DiscourseのOneboxでの「&」のエスケープ

関連トピック