Onebox에서 Discourse의 & 이스케이프 처리

loic · 1월 16, 2026, 10:45오전

해당 문제를 해결하는 패치를 방금 병합했습니다(모든 Onebox에서 해결되어야 합니다):

github.com/discourse/discourse

FIX: Don't escape HTML entities twice in oneboxes (#37141)

main ← loic/fix-double-escape-onebox

merged 10:40AM - 16 Jan 26 UTC

Flink

+32 -25

Sometimes, HTML entities can be escaped twice, typically when getting sanitized …data from our `Onebox::OpenGraph` class then providing that value to a template. We’re using the Mustache gem to process the Onebox templates, and it will automatically escape HTML entities. This is usually not a problem, but it is for things like ampersands. For example, if the value we provide to the template is `&`, then Mustache will convert it to `&amp;`. This PR fixes that behavior by decoding the result of the sanitization we apply in `Onebox::OpenGraph`. That way, templates will get `&` instead of `&`, thus there won’t be any double escaping.

글		댓글	조회수
One Box url encoding of already encoded comma Bug	3	1181	6월 27, 2019
`’` in topic titles on oops page Bug fixed	3	200	6월 29, 2026
Onebox links with ampersands don't encode correctly Bug	1	953	9월 7, 2017
In onebox, `&` become `&` Support	10	1539	5월 14, 2019
Weird double escaping of < & > still showing up Bug	1	1118	1월 1, 2016

Onebox에서 Discourse의 & 이스케이프 처리

Related topics