govspeak 6.5.2 → 6.5.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: eaa4aea2a5ad557426d34d0d17ef75ae5d538862cc293ad6d6403a663797667f
-  data.tar.gz: 3950f3fdd4bc77f5b00ceb5bede0ffca988f2c910739ee0906fa49431be95ae0
+  metadata.gz: f6cd5f76c1c1a80f74d86785f10b591bdfc1f75f2e6b2dcf874e8b39ab0e213c
+  data.tar.gz: 4be63d972c6fd0acd9a09120930760230e45ffd59522689177602d977b9443ba
 SHA512:
-  metadata.gz: 90a7401f005a80646a8390723c04b4e2754d39b42559189d70aab1c1214223b62e805f6cb640b4c1acc3dd37401fe059849884af56f533295fa4b24af760f7f8
-  data.tar.gz: 18f85c38c237de6fc51b62b15c69b7bf236e0957c218e8ee246ba7fd572102231b129f6728461b5b9e57f2884107a0c419327e8ce522e8c70fe38fd3c4b1f066
+  metadata.gz: 6ef225809fc1434259a89d44f5d5c48f9afed99dabe5b81306347a19fe50df08ecbc1c906fa2ee704a9f63b3d9448d88ddeaa1ef110a49c99ba6441da299a0c5
+  data.tar.gz: ce7ec875cb1b33b353469846ba9c5226fbffc13551ef74cb92508e5ca7f76f1519b1c6a9b288d9978b52c16cc9fa9cb7c7500c5f3fedbc35c9c846e0faa029e2

data/CHANGELOG.md

@@ -1,8 +1,29 @@
+## 6.5.7
+
+* Update GOV.UK Publishing components to version to 23.0.0 or greater
+
+## 6.5.6
+
+* Update Kramdown version to 2.3.0 or greater
+
+## 6.5.5
+
+* Prevent links in table headers being stripped (PR#187)
+
+## 6.5.4
+
+* Require Sanitize to be at least 5.2.1 due to https://nvd.nist.gov/vuln/detail/CVE-2020-4054
+
+## 6.5.3
+
+* Use button component for buttons (PR#176)
+
 ## 6.5.2
 
 * Allow `data` attributes on `div` tags (PR#173)
 
 ## 6.5.1
+
 * Change unicode testing characters after external gem change
 * Move from govuk-lint to rubocop-govuk
 * Allow version 6 of actionview

data/README.md

@@ -619,8 +619,7 @@ will output
 
 An accessible way to add button links into content, that can also allow cross domain tracking with [Google Analytics](https://support.google.com/analytics/answer/7372977?hl=en)
 
-This button component is [extended from static](http://govuk-static.herokuapp.com/component-guide/button) for [use in govspeak](http://govuk-static.herokuapp.com/component-guide/govspeak/button)
-Note: Ideally we'd use the original component directly but this currently isnt possible
+This button component uses the component from the [components gem](https://components.publishing.service.gov.uk/component-guide/button) for use in govspeak.
 
 You must use the [link](https://daringfireball.net/projects/markdown/syntax#link) syntax within the button tags.
 
@@ -635,7 +634,7 @@ To get the most basic button.
 which outputs
 
 ```html
-<a role="button" class="button" href="https://gov.uk/random">
+<a role="button" class="gem-c-button govuk-button" href="https://gov.uk/random">
   Continue
 </a>
 ```
@@ -649,8 +648,9 @@ To turn a button into a ['Start now' button](https://www.gov.uk/service-manual/d
 which outputs
 
 ```html
-<a role="button" class="button button-start" href="https://gov.uk/random">
+<a role="button" class="gem-c-button govuk-button govuk-button--start" href="https://gov.uk/random">
   Start Now
+  <svg class="govuk-button__start-icon" xmlns="http://www.w3.org/2000/svg" width="17.5" height="19" viewBox="0 0 33 40" role="presentation" focusable="false"><path fill="currentColor" d="M0 0h13l20 20-20 20H0l20-20z"></path></svg>
 </a>
 ```
 
@@ -667,12 +667,13 @@ which outputs
 ```html
 <a
   role="button"
-  class="button button-start"
+  class="gem-c-button govuk-button govuk-button--start"
   href="https://example.com/external-service/start-now"
   data-module="cross-domain-tracking"
   data-tracking-code="UA-XXXXXX-Y"
   data-tracking-name="govspeakButtonTracker"
 >
   Start Now
+  <svg class="govuk-button__start-icon" xmlns="http://www.w3.org/2000/svg" width="17.5" height="19" viewBox="0 0 33 40" role="presentation" focusable="false"><path fill="currentColor" d="M0 0h13l20 20-20 20H0l20-20z"></path></svg>
 </a>
 ```

data/Rakefile

@@ -1,15 +1,18 @@
 require "rake"
 require "rake/testtask"
+require "rubocop/rake_task"
 require "bundler"
 
 Bundler::GemHelper.install_tasks
 
+RuboCop::RakeTask.new
+
 desc "Run basic tests"
-Rake::TestTask.new("test") { |t|
+Rake::TestTask.new("test") do |t|
   t.libs << "test"
   t.pattern = "test/*_test.rb"
   t.verbose = true
   t.warning = true
-}
+end
 
-task default: [:test]
+task default: %i[test rubocop]

data/lib/govspeak.rb

@@ -57,7 +57,9 @@ module Govspeak
       @links = Array.wrap(options.delete(:links))
       @contacts = Array.wrap(options.delete(:contacts))
       @locale = options.fetch(:locale, "en")
-      @options = { input: PARSER_CLASS_NAME, sanitize: true }.merge(options)
+      @options = { input: PARSER_CLASS_NAME,
+                   sanitize: true,
+                   syntax_highlighter: nil }.merge(options)
       @options[:entity_output] = :symbolic
     end
 
@@ -108,9 +110,9 @@ module Govspeak
       source = Govspeak::BlockquoteExtraQuoteRemover.remove(source)
       source = remove_forbidden_characters(source)
       self.class.extensions.each do |_, regexp, block|
-        source.gsub!(regexp) {
+        source.gsub!(regexp) do
           instance_exec(*Regexp.last_match.captures, &block)
-        }
+        end
       end
       source
     end
@@ -127,20 +129,20 @@ module Govspeak
     end
 
     def self.surrounded_by(open, close = nil)
-      open = Regexp::escape(open)
+      open = Regexp.escape(open)
       if close
-        close = Regexp::escape(close)
-        %r+(?:\r|\n|^)#{open}(.*?)#{close} *(\r|\n|$)?+m
+        close = Regexp.escape(close)
+        %r{(?:\r|\n|^)#{open}(.*?)#{close} *(\r|\n|$)?}m
       else
-        %r+(?:\r|\n|^)#{open}(.*?)#{open}? *(\r|\n|$)+m
+        %r{(?:\r|\n|^)#{open}(.*?)#{open}? *(\r|\n|$)}m
       end
     end
 
     def self.wrap_with_div(class_name, character, parser = Kramdown::Document)
-      extension(class_name, surrounded_by(character)) { |body|
+      extension(class_name, surrounded_by(character)) do |body|
         content = parser ? parser.new("#{body.strip}\n").to_html : body.strip
-        %{\n<div class="#{class_name}">\n#{content}</div>\n}
-      }
+        %(\n<div class="#{class_name}">\n#{content}</div>\n)
+      end
     end
 
     def insert_strong_inside_p(body, parser = Govspeak::Document)
@@ -160,11 +162,11 @@ module Govspeak
         \s*  # any whitespace between opening bracket and link
       {\/button} # match ending bracket
       (?:\r|\n|$) # non-capturing match to make sure end of line and linebreak
-    }x) { |attributes, text, href|
-      button_classes = "button"
-      button_classes << " button-start" if attributes =~ /start/
+    }x) do |attributes, text, href|
+      button_classes = "govuk-button"
       /cross-domain-tracking:(?<cross_domain_tracking>.[^\s*]+)/ =~ attributes
       data_attribute = ""
+      data_attribute << " data-start='true'" if attributes =~ /start/
       if cross_domain_tracking
         data_attribute << " data-module='cross-domain-tracking'"
         data_attribute << " data-tracking-code='#{cross_domain_tracking.strip}'"
@@ -173,36 +175,36 @@ module Govspeak
       text = text.strip
       href = href.strip
 
-      %{\n<a role="button" class="#{button_classes}" href="#{href}" #{data_attribute}>#{text}</a>\n}
-    }
+      %(\n<a role="button" class="#{button_classes}" href="#{href}" #{data_attribute}>#{text}</a>\n)
+    end
 
-    extension("highlight-answer") { |body|
-      %{\n\n<div class="highlight-answer">
-#{Govspeak::Document.new(body.strip).to_html}</div>\n}
-    }
+    extension("highlight-answer") do |body|
+      %(\n\n<div class="highlight-answer">
+#{Govspeak::Document.new(body.strip).to_html}</div>\n)
+    end
 
-    extension("stat-headline", %r${stat-headline}(.*?){/stat-headline}$m) { |body|
-      %{\n\n<aside class="stat-headline">
-#{Govspeak::Document.new(body.strip).to_html}</aside>\n}
-    }
+    extension("stat-headline", %r${stat-headline}(.*?){/stat-headline}$m) do |body|
+      %(\n\n<aside class="stat-headline">
+#{Govspeak::Document.new(body.strip).to_html}</aside>\n)
+    end
 
     # FIXME: these surrounded_by arguments look dodgy
-    extension("external", surrounded_by("x[", ")x")) { |body|
+    extension("external", surrounded_by("x[", ")x")) do |body|
       Kramdown::Document.new("[#{body.strip}){:rel='external'}").to_html
-    }
+    end
 
-    extension("informational", surrounded_by("^")) { |body|
-      %{\n\n<div role="note" aria-label="Information" class="application-notice info-notice">
-#{Govspeak::Document.new(body.strip).to_html}</div>\n}
-    }
+    extension("informational", surrounded_by("^")) do |body|
+      %(\n\n<div role="note" aria-label="Information" class="application-notice info-notice">
+#{Govspeak::Document.new(body.strip).to_html}</div>\n)
+    end
 
-    extension("important", surrounded_by("@")) { |body|
-      %{\n\n<div role="note" aria-label="Important" class="advisory">#{insert_strong_inside_p(body)}</div>\n}
-    }
+    extension("important", surrounded_by("@")) do |body|
+      %(\n\n<div role="note" aria-label="Important" class="advisory">#{insert_strong_inside_p(body)}</div>\n)
+    end
 
-    extension("helpful", surrounded_by("%")) { |body|
-      %{\n\n<div role="note" aria-label="Warning" class="application-notice help-notice">\n#{Govspeak::Document.new(body.strip).to_html}</div>\n}
-    }
+    extension("helpful", surrounded_by("%")) do |body|
+      %(\n\n<div role="note" aria-label="Warning" class="application-notice help-notice">\n#{Govspeak::Document.new(body.strip).to_html}</div>\n)
+    end
 
     extension("barchart", /{barchart(.*?)}/) do |captures|
       stacked = ".mc-stacked" if captures.include? "stacked"
@@ -210,13 +212,13 @@ module Govspeak
       negative = ".mc-negative" if captures.include? "negative"
 
       [
-       "{:",
-       ".js-barchart-table",
-       stacked,
-       compact,
-       negative,
-       ".mc-auto-outdent",
-       "}",
+        "{:",
+        ".js-barchart-table",
+        stacked,
+        compact,
+        negative,
+        ".mc-auto-outdent",
+        "}",
       ].join(" ")
     end
 
@@ -234,12 +236,12 @@ module Govspeak
 
       attachment = AttachmentPresenter.new(attachment)
 
-      span_id = attachment.id ? %{ id="attachment_#{attachment.id}"} : ""
+      span_id = attachment.id ? %( id="attachment_#{attachment.id}") : ""
       # new lines inside our title cause problems with govspeak rendering as this is expected to be on one line.
       title = (attachment.title || "").tr("\n", " ")
       link = attachment.link(title, attachment.url)
       attributes = attachment.attachment_attributes.empty? ? "" : " (#{attachment.attachment_attributes})"
-      %{<span#{span_id} class="attachment-inline">#{link}#{attributes}</span>}
+      %(<span#{span_id} class="attachment-inline">#{link}#{attributes}</span>)
     end
 
     # DEPRECATED: use 'Image:image-id' instead
@@ -261,10 +263,10 @@ module Govspeak
     #
     # This issue is not considered a bug by kramdown: https://github.com/gettalong/kramdown/issues/191
     def render_image(image)
-      id_attr = image.id ? %{ id="attachment_#{image.id}"} : ""
+      id_attr = image.id ? %( id="attachment_#{image.id}") : ""
       lines = []
-      lines << %{<figure#{id_attr} class="image embedded">}
-      lines << %{<div class="img"><img src="#{encode(image.url)}" alt="#{encode(image.alt_text)}"></div>}
+      lines << %(<figure#{id_attr} class="image embedded">)
+      lines << %(<div class="img"><img src="#{encode(image.url)}" alt="#{encode(image.alt_text)}"></div>)
       lines << image.figcaption_html if image.figcaption?
       lines << "</figure>"
       lines.join
@@ -279,9 +281,9 @@ module Govspeak
     wrap_with_div("example", "$E", Govspeak::Document)
     wrap_with_div("call-to-action", "$CTA", Govspeak::Document)
 
-    extension("address", surrounded_by("$A")) { |body|
-      %{\n<div class="address"><div class="adr org fn"><p>\n#{body.sub("\n", '').gsub("\n", '<br />')}\n</p></div></div>\n}
-    }
+    extension("address", surrounded_by("$A")) do |body|
+      %(\n<div class="address"><div class="adr org fn"><p>\n#{body.sub("\n", '').gsub("\n", '<br />')}\n</p></div></div>\n)
+    end
 
     extension("legislative list", /#{NEW_PARAGRAPH_LOOKBEHIND}\$LegislativeList\s*$(.*?)\$EndLegislativeList/m) do |body|
       Govspeak::KramdownOverrides.with_kramdown_ordered_lists_disabled do
@@ -295,9 +297,9 @@ module Govspeak
 
     extension("numbered list", /^[ \t]*((s\d+\.\s.*(?:\n|$))+)/) do |body|
       body.gsub!(/s(\d+)\.\s(.*)(?:\n|$)/) do
-        "<li>#{Govspeak::Document.new($2.strip).to_html}</li>\n"
+        "<li>#{Govspeak::Document.new(Regexp.last_match(2).strip).to_html}</li>\n"
       end
-      %{<ol class="steps">\n#{body}</ol>}
+      %(<ol class="steps">\n#{body}</ol>)
     end
 
     def self.devolved_options
@@ -362,13 +364,13 @@ module Govspeak
     extension("Attachment", /#{NEW_PARAGRAPH_LOOKBEHIND}\[Attachment:\s*(.*?)\s*\]/) do |attachment_id|
       next "" if attachments.none? { |a| a[:id] == attachment_id }
 
-      %{<govspeak-embed-attachment id="#{attachment_id}"></govspeak-embed-attachment>}
+      %(<govspeak-embed-attachment id="#{attachment_id}"></govspeak-embed-attachment>)
     end
 
     extension("AttachmentLink", /\[AttachmentLink:\s*(.*?)\s*\]/) do |attachment_id|
       next "" if attachments.none? { |a| a[:id] == attachment_id }
 
-      %{<govspeak-embed-attachment-link id="#{attachment_id}"></govspeak-embed-attachment-link>}
+      %(<govspeak-embed-attachment-link id="#{attachment_id}"></govspeak-embed-attachment-link>)
     end
 
   private

data/lib/govspeak/html_sanitizer.rb

@@ -51,13 +51,15 @@ class Govspeak::HtmlSanitizer
   def sanitize_config
     Sanitize::Config.merge(
       Sanitize::Config::RELAXED,
-      elements: Sanitize::Config::RELAXED[:elements] + %w[govspeak-embed-attachment govspeak-embed-attachment-link],
+      elements: Sanitize::Config::RELAXED[:elements] + %w[govspeak-embed-attachment govspeak-embed-attachment-link svg path],
       attributes: {
         :all => Sanitize::Config::RELAXED[:attributes][:all] + %w[role aria-label],
-        "a"  => Sanitize::Config::RELAXED[:attributes]["a"] + [:data],
+        "a" => Sanitize::Config::RELAXED[:attributes]["a"] + [:data],
+        "svg" => Sanitize::Config::RELAXED[:attributes][:all] + %w[xmlns width height viewbox focusable],
+        "path" => Sanitize::Config::RELAXED[:attributes][:all] + %w[fill d],
         "div" => [:data],
-        "th"  => Sanitize::Config::RELAXED[:attributes]["th"] + %w[style],
-        "td"  => Sanitize::Config::RELAXED[:attributes]["td"] + %w[style],
+        "th" => Sanitize::Config::RELAXED[:attributes]["th"] + %w[style],
+        "td" => Sanitize::Config::RELAXED[:attributes]["td"] + %w[style],
         "govspeak-embed-attachment" => %w[content-id],
       },
     )

data/lib/govspeak/kramdown_overrides.rb

@@ -1,9 +1,9 @@
 module Govspeak
   module KramdownOverrides
-    # This depends on two internal parts of Kramdown.
+    # This depends on two internal parts of Kramdown.
     # 1. Parser registry (kramdown/parser/kramdown.rb#define_parser)
     # 2. Kramdown list regexes (kramdown/parser/kramdown/list.rb)
-    # Updating the Kramdown gem therefore also means updating this file to to
+    # Updating the Kramdown gem therefore also means updating this file to to
     # match Kramdown's internals.
 
     def self.with_kramdown_ordered_lists_disabled

data/lib/govspeak/link_extractor.rb

@@ -14,9 +14,9 @@ module Govspeak
     attr_reader :document, :website_root
 
     def extract_links
-      document_anchors.
-        map { |link| extract_href_from_link(link) }.
-        reject(&:blank?)
+      document_anchors
+        .map { |link| extract_href_from_link(link) }
+        .reject(&:blank?)
     end
 
     def extract_href_from_link(link)

data/lib/govspeak/post_processor.rb

@@ -92,11 +92,31 @@ module Govspeak
       end
 
       document.css(":not(thead) tr td:first-child").map do |el|
-        if el.content.match?(/^#($|\s.*$)/)
-          el.content = el.content.gsub(/^#($|\s)/, "") # Replace '# ' and '#', but not '#Word'.
-          el.name = "th" if el.content.present? # This also prevents a `th` with nothing inside it; a `td` is preferable.
-          el[:scope] = "row" if el.content.present? # `scope` shouldn't be used if there's nothing in the table heading.
-        end
+        next unless el.content.match?(/^#($|\s.*$)/)
+
+        # Replace '# ' and '#', but not '#Word'.
+        # This runs on the first child of the element to preserve any links
+        el.children.first.content = el.children.first.content.gsub(/^#($|\s)/, "")
+        el.name = "th" if el.content.present? # This also prevents a `th` with nothing inside it; a `td` is preferable.
+        el[:scope] = "row" if el.content.present? # `scope` shouldn't be used if there's nothing in the table heading.
+      end
+    end
+
+    extension("use gem component for buttons") do |document|
+      document.css(".govuk-button").map do |el|
+        button_html = GovukPublishingComponents.render(
+          "govuk_publishing_components/components/button",
+          text: el.content,
+          href: el["href"],
+          start: el["data-start"],
+          data_attributes: {
+            module: el["data-module"],
+            "tracking-code": el["data-tracking-code"],
+            "tracking-name": el["data-tracking-name"],
+          },
+        ).squish.gsub("> <", "><").gsub!(/\s+/, " ")
+
+        el.swap(button_html)
       end
     end
 

data/lib/govspeak/presenters/attachment_presenter.rb

@@ -55,46 +55,46 @@ module Govspeak
 
     def humanized_content_type(file_extension)
       file_extension_vs_humanized_content_type = {
-        "chm"  => file_abbr_tag("CHM", "Microsoft Compiled HTML Help"),
-        "csv"  => file_abbr_tag("CSV", "Comma-separated Values"),
+        "chm" => file_abbr_tag("CHM", "Microsoft Compiled HTML Help"),
+        "csv" => file_abbr_tag("CSV", "Comma-separated Values"),
         "diff" => file_abbr_tag("DIFF", "Plain text differences"),
-        "doc"  => MS_WORD_DOCUMENT_HUMANIZED_CONTENT_TYPE,
+        "doc" => MS_WORD_DOCUMENT_HUMANIZED_CONTENT_TYPE,
         "docx" => MS_WORD_DOCUMENT_HUMANIZED_CONTENT_TYPE,
-        "dot"  => file_abbr_tag("DOT", "MS Word Document Template"),
-        "dxf"  => file_abbr_tag("DXF", "AutoCAD Drawing Exchange Format"),
-        "eps"  => file_abbr_tag("EPS", "Encapsulated PostScript"),
-        "gif"  => file_abbr_tag("GIF", "Graphics Interchange Format"),
-        "gml"  => file_abbr_tag("GML", "Geography Markup Language"),
+        "dot" => file_abbr_tag("DOT", "MS Word Document Template"),
+        "dxf" => file_abbr_tag("DXF", "AutoCAD Drawing Exchange Format"),
+        "eps" => file_abbr_tag("EPS", "Encapsulated PostScript"),
+        "gif" => file_abbr_tag("GIF", "Graphics Interchange Format"),
+        "gml" => file_abbr_tag("GML", "Geography Markup Language"),
         "html" => file_abbr_tag("HTML", "Hypertext Markup Language"),
         "ics" => file_abbr_tag("ICS", "iCalendar file"),
-        "jpg"  => "JPEG",
-        "odp"  => file_abbr_tag("ODP", "OpenDocument Presentation"),
-        "ods"  => file_abbr_tag("ODS", "OpenDocument Spreadsheet"),
-        "odt"  => file_abbr_tag("ODT", "OpenDocument Text document"),
-        "pdf"  => file_abbr_tag("PDF", "Portable Document Format"),
-        "png"  => file_abbr_tag("PNG", "Portable Network Graphic"),
-        "ppt"  => MS_POWERPOINT_PRESENTATION_HUMANIZED_CONTENT_TYPE,
+        "jpg" => "JPEG",
+        "odp" => file_abbr_tag("ODP", "OpenDocument Presentation"),
+        "ods" => file_abbr_tag("ODS", "OpenDocument Spreadsheet"),
+        "odt" => file_abbr_tag("ODT", "OpenDocument Text document"),
+        "pdf" => file_abbr_tag("PDF", "Portable Document Format"),
+        "png" => file_abbr_tag("PNG", "Portable Network Graphic"),
+        "ppt" => MS_POWERPOINT_PRESENTATION_HUMANIZED_CONTENT_TYPE,
         "pptx" => MS_POWERPOINT_PRESENTATION_HUMANIZED_CONTENT_TYPE,
-        "ps"   => file_abbr_tag("PS", "PostScript"),
-        "rdf"  => file_abbr_tag("RDF", "Resource Description Framework"),
-        "rtf"  => file_abbr_tag("RTF", "Rich Text Format"),
-        "sch"  => file_abbr_tag("SCH", "XML based Schematic"),
-        "txt"  => "Plain text",
+        "ps" => file_abbr_tag("PS", "PostScript"),
+        "rdf" => file_abbr_tag("RDF", "Resource Description Framework"),
+        "rtf" => file_abbr_tag("RTF", "Rich Text Format"),
+        "sch" => file_abbr_tag("SCH", "XML based Schematic"),
+        "txt" => "Plain text",
         "wsdl" => file_abbr_tag("WSDL", "Web Services Description Language"),
-        "xls"  => MS_EXCEL_SPREADSHEET_HUMANIZED_CONTENT_TYPE,
+        "xls" => MS_EXCEL_SPREADSHEET_HUMANIZED_CONTENT_TYPE,
         "xlsm" => file_abbr_tag("XLSM", "MS Excel Macro-Enabled Workbook"),
         "xlsx" => MS_EXCEL_SPREADSHEET_HUMANIZED_CONTENT_TYPE,
-        "xlt"  => file_abbr_tag("XLT", "MS Excel Spreadsheet Template"),
-        "xsd"  => file_abbr_tag("XSD", "XML Schema"),
+        "xlt" => file_abbr_tag("XLT", "MS Excel Spreadsheet Template"),
+        "xsd" => file_abbr_tag("XSD", "XML Schema"),
         "xslt" => file_abbr_tag("XSLT", "Extensible Stylesheet Language Transformation"),
-        "zip"  => file_abbr_tag("ZIP", "Zip archive"),
+        "zip" => file_abbr_tag("ZIP", "Zip archive"),
       }
       file_extension_vs_humanized_content_type.fetch(file_extension.to_s.downcase, "")
     end
 
     def link(body, url, options = {})
-      options_str = options.map { |k, v| %{#{encode(k)}="#{encode(v)}"} }.join(" ")
-      %{<a href="#{encode(url)}" #{options_str}>#{body}</a>}
+      options_str = options.map { |k, v| %(#{encode(k)}="#{encode(v)}") }.join(" ")
+      %(<a href="#{encode(url)}" #{options_str}>#{body}</a>)
     end
 
   private