brightspace-mcp-server 5.1.16 → 5.1.17

package/build/utils/html-attributes.js

@@ -7,15 +7,20 @@
 function codePoint(whole, code) {
     return code <= 0x10ffff ? String.fromCodePoint(code) : whole;
 }
-/** Decode the character references Brightspace's HTML editor writes into attribute values. */
+const NAMED = { quot: '"', lt: "<", gt: ">", amp: "&" };
+/**
+ * Decode the character references Brightspace's HTML editor writes into
+ * attribute values, in one pass so a decoded `&` never starts another
+ * reference: `&#38;lt;` is the text `&lt;`, not `<` (issue #360).
+ */
 export function decodeEntities(value) {
-    return value
-        .replace(/&#x([0-9a-f]+);/gi, (whole, hex) => codePoint(whole, parseInt(hex, 16)))
-        .replace(/&#(\d+);/g, (whole, dec) => codePoint(whole, parseInt(dec, 10)))
-        .replace(/&quot;/g, '"')
-        .replace(/&lt;/g, "<")
-        .replace(/&gt;/g, ">")
-        .replace(/&amp;/g, "&");
+    return value.replace(/&(?:#[xX]([0-9a-fA-F]+)|#(\d+)|(quot|lt|gt|amp));/g, (whole, hex, dec, name) => {
+        if (hex !== undefined)
+            return codePoint(whole, parseInt(hex, 16));
+        if (dec !== undefined)
+            return codePoint(whole, parseInt(dec, 10));
+        return NAMED[name];
+    });
 }
 /**
  * The attributes of every `<tag>` element in `html`, names lowercased and

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "brightspace-mcp-server",
-  "version": "5.1.16",
+  "version": "5.1.17",
   "mcpName": "io.github.RohanMuppa/brightspace",
   "description": "MCP server for Brightspace (D2L). Check grades, due dates, assignments, announcements, syllabus, rosters and more via Claude, ChatGPT, Cursor, Windsurf, or any MCP client.",
   "type": "module",