boltdocs 1.3.1 → 1.3.2

package/dist/{cache-EHR7SXRU.mjs → cache-GQHF6BXI.mjs}

@@ -3,7 +3,7 @@ import {
   FileCache,
   TransformCache,
   flushCache
-} from "./chunk-GSYECEZY.mjs";
+} from "./chunk-CYBWLFOG.mjs";
 export {
   AssetCache,
   FileCache,

package/dist/{chunk-GSYECEZY.mjs → chunk-CYBWLFOG.mjs}

@@ -34,7 +34,10 @@ function parseFrontmatter(filePath) {
   return { data, content };
 }
 function escapeHtml(str) {
-  return str.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+  return str.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/'/g, "&apos;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+}
+function escapeXml(str) {
+  return escapeHtml(str);
 }
 function fileToRoutePath(relativePath) {
   let cleanedPath = relativePath.split("/").map(stripNumberPrefix).join("/");
@@ -372,6 +375,7 @@ export {
   isDocFile,
   parseFrontmatter,
   escapeHtml,
+  escapeXml,
   fileToRoutePath,
   capitalize,
   FileCache,

package/dist/node/index.js

@@ -57,7 +57,10 @@ function parseFrontmatter(filePath) {
   return { data, content };
 }
 function escapeHtml(str) {
-  return str.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+  return str.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/'/g, "&apos;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+}
+function escapeXml(str) {
+  return escapeHtml(str);
 }
 function fileToRoutePath(relativePath) {
   let cleanedPath = relativePath.split("/").map(stripNumberPrefix).join("/");
@@ -722,26 +725,24 @@ var import_url2 = require("url");
 var import_module = require("module");
 
 // src/node/ssg/meta.ts
+init_utils();
 function replaceMetaTags(html, meta) {
-  return html.replace(/<title>.*?<\/title>/, `<title>${meta.title}</title>`).replace(
+  const title = escapeHtml(meta.title);
+  const description = escapeHtml(meta.description);
+  return html.replace(/<title>.*?<\/title>/, `<title>${title}</title>`).replace(
     /(<meta name="description" content=")[^"]*(")/,
-    `$1${meta.description}$2`
-  ).replace(
-    /(<meta property="og:title" content=")[^"]*(")/,
-    `$1${meta.title}$2`
-  ).replace(
+    `$1${description}$2`
+  ).replace(/(<meta property="og:title" content=")[^"]*(")/, `$1${title}$2`).replace(
     /(<meta property="og:description" content=")[^"]*(")/,
-    `$1${meta.description}$2`
-  ).replace(
-    /(<meta name="twitter:title" content=")[^"]*(")/,
-    `$1${meta.title}$2`
-  ).replace(
+    `$1${description}$2`
+  ).replace(/(<meta name="twitter:title" content=")[^"]*(")/, `$1${title}$2`).replace(
     /(<meta name="twitter:description" content=")[^"]*(")/,
-    `$1${meta.description}$2`
+    `$1${description}$2`
   );
 }
 
 // src/node/ssg/sitemap.ts
+init_utils();
 function generateSitemap(routePaths, config) {
   const baseUrl = config?.siteUrl?.replace(/\/$/, "") || "https://example.com";
   const today = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
@@ -770,7 +771,7 @@ function generateSitemap(routePaths, config) {
 <urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
 ${entries.map(
     (e) => `  <url>
-    <loc>${baseUrl}${e.url}</loc>
+    <loc>${escapeXml(baseUrl)}${escapeXml(e.url)}</loc>
     <lastmod>${today}</lastmod>
     <changefreq>${e.changefreq}</changefreq>
     <priority>${e.priority}</priority>

package/dist/node/index.mjs

@@ -3,13 +3,14 @@ import {
   TransformCache,
   capitalize,
   escapeHtml,
+  escapeXml,
   extractNumberPrefix,
   fileToRoutePath,
   isDocFile,
   normalizePath,
   parseFrontmatter,
   stripNumberPrefix
-} from "../chunk-GSYECEZY.mjs";
+} from "../chunk-CYBWLFOG.mjs";
 
 // src/node/plugin/index.ts
 import { loadEnv } from "vite";
@@ -307,21 +308,17 @@ import { createRequire } from "module";
 
 // src/node/ssg/meta.ts
 function replaceMetaTags(html, meta) {
-  return html.replace(/<title>.*?<\/title>/, `<title>${meta.title}</title>`).replace(
+  const title = escapeHtml(meta.title);
+  const description = escapeHtml(meta.description);
+  return html.replace(/<title>.*?<\/title>/, `<title>${title}</title>`).replace(
     /(<meta name="description" content=")[^"]*(")/,
-    `$1${meta.description}$2`
-  ).replace(
-    /(<meta property="og:title" content=")[^"]*(")/,
-    `$1${meta.title}$2`
-  ).replace(
+    `$1${description}$2`
+  ).replace(/(<meta property="og:title" content=")[^"]*(")/, `$1${title}$2`).replace(
     /(<meta property="og:description" content=")[^"]*(")/,
-    `$1${meta.description}$2`
-  ).replace(
-    /(<meta name="twitter:title" content=")[^"]*(")/,
-    `$1${meta.title}$2`
-  ).replace(
+    `$1${description}$2`
+  ).replace(/(<meta name="twitter:title" content=")[^"]*(")/, `$1${title}$2`).replace(
     /(<meta name="twitter:description" content=")[^"]*(")/,
-    `$1${meta.description}$2`
+    `$1${description}$2`
   );
 }
 
@@ -354,7 +351,7 @@ function generateSitemap(routePaths, config) {
 <urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
 ${entries.map(
     (e) => `  <url>
-    <loc>${baseUrl}${e.url}</loc>
+    <loc>${escapeXml(baseUrl)}${escapeXml(e.url)}</loc>
     <lastmod>${today}</lastmod>
     <changefreq>${e.changefreq}</changefreq>
     <priority>${e.priority}</priority>
@@ -433,7 +430,7 @@ async function generateStaticPages(options) {
   console.log(
     `[boltdocs] Generated ${routes.length} static pages + sitemap.xml`
   );
-  const { flushCache } = await import("../cache-EHR7SXRU.mjs");
+  const { flushCache } = await import("../cache-GQHF6BXI.mjs");
   await flushCache();
 }
 
@@ -615,7 +612,7 @@ function boltdocsPlugin(options = {}, passedConfig) {
         if (!isBuild) return;
         const outDir = viteConfig?.build?.outDir ? path4.resolve(viteConfig.root, viteConfig.build.outDir) : path4.resolve(process.cwd(), "dist");
         await generateStaticPages({ docsDir, outDir, config });
-        const { flushCache } = await import("../cache-EHR7SXRU.mjs");
+        const { flushCache } = await import("../cache-GQHF6BXI.mjs");
         await flushCache();
       }
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "boltdocs",
-  "version": "1.3.1",
+  "version": "1.3.2",
   "description": "A lightweight documentation generator for React projects.",
   "main": "dist/node/index.js",
   "module": "dist/node/index.mjs",

package/src/node/ssg/meta.ts

@@ -1,3 +1,5 @@
+import { escapeHtml } from "../utils";
+
 /**
  * Replaces placeholder or default meta tags in the HTML template with page-specific values.
  *
@@ -9,26 +11,23 @@ export function replaceMetaTags(
   html: string,
   meta: { title: string; description: string },
 ): string {
+  const title = escapeHtml(meta.title);
+  const description = escapeHtml(meta.description);
+
   return html
-    .replace(/<title>.*?<\/title>/, `<title>${meta.title}</title>`)
+    .replace(/<title>.*?<\/title>/, `<title>${title}</title>`)
     .replace(
       /(<meta name="description" content=")[^"]*(")/,
-      `$1${meta.description}$2`,
-    )
-    .replace(
-      /(<meta property="og:title" content=")[^"]*(")/,
-      `$1${meta.title}$2`,
+      `$1${description}$2`,
     )
+    .replace(/(<meta property="og:title" content=")[^"]*(")/, `$1${title}$2`)
     .replace(
       /(<meta property="og:description" content=")[^"]*(")/,
-      `$1${meta.description}$2`,
-    )
-    .replace(
-      /(<meta name="twitter:title" content=")[^"]*(")/,
-      `$1${meta.title}$2`,
+      `$1${description}$2`,
     )
+    .replace(/(<meta name="twitter:title" content=")[^"]*(")/, `$1${title}$2`)
     .replace(
       /(<meta name="twitter:description" content=")[^"]*(")/,
-      `$1${meta.description}$2`,
+      `$1${description}$2`,
     );
 }

package/src/node/ssg/sitemap.ts

@@ -1,4 +1,5 @@
 import { BoltdocsConfig } from "../config";
+import { escapeXml } from "../utils";
 
 /**
  * Generates a standard XML sitemap for search engine crawlers.
@@ -43,7 +44,7 @@ export function generateSitemap(
 ${entries
   .map(
     (e) => `  <url>
-    <loc>${baseUrl}${e.url}</loc>
+    <loc>${escapeXml(baseUrl)}${escapeXml(e.url)}</loc>
     <lastmod>${today}</lastmod>
     <changefreq>${e.changefreq}</changefreq>
     <priority>${e.priority}</priority>

package/src/node/utils.ts

@@ -86,10 +86,21 @@ export function escapeHtml(str: string): string {
   return str
     .replace(/&/g, "&")
     .replace(/"/g, """)
+    .replace(/'/g, "'")
     .replace(/</g, "&lt;")
     .replace(/>/g, "&gt;");
 }
 
+/**
+ * Alias for escapeHtml to be used in XML contexts (like sitemaps).
+ *
+ * @param str - The raw string to escape
+ * @returns The escaped string
+ */
+export function escapeXml(str: string): string {
+  return escapeHtml(str);
+}
+
 /**
  * Converts a file path relative to the `docsDir` into a URL route path.
  * Handles removing extensions, converting `index` files to directory roots,