enarratio-astro 0.4.3 → 0.4.4

package/CHANGELOG.md

@@ -7,6 +7,13 @@ every such change is listed here.
 
 ## [Unreleased]
 
+## [0.4.4] - 2026-11-07
+
+### Changed
+
+- Escapes the "could not be drawn" note itself instead of using Enarratio's `escapeHtml`, which Enarratio 0.9.0 stops exporting.
+  Output is unchanged, and the package works with Enarratio 0.7.3 and 0.9.0 alike.
+
 ## [0.4.3] - 2026-11-07
 
 ### Changed

package/dist/figure.js

@@ -1,11 +1,21 @@
-import { escapeHtml } from "enarratio";
+const ESCAPES = {
+    "&": "&",
+    "<": "&lt;",
+    ">": "&gt;",
+    '"': "&quot;",
+    "'": "&#39;",
+};
+/** Escapes text for HTML. Local because Enarratio no longer exports its own (0.9.0). */
+function escapeText(value) {
+    return value.replace(/[&<>"']/g, (ch) => ESCAPES[ch] ?? ch);
+}
 /**
  * The markup that goes on the page for a drawn chart, or for one that could not be drawn: the
  * chart in a wrapper (marked when it is interactive), or a note saying why.
  */
 export function chartMarkup(result, interactive) {
     if (!result.ok) {
-        return `<p class="enarratio-chart-error" role="note">This chart could not be drawn. ${escapeHtml(result.error)}</p>`;
+        return `<p class="enarratio-chart-error" role="note">This chart could not be drawn. ${escapeText(result.error)}</p>`;
     }
     const mark = interactive ? " data-enarratio-interactive-chart" : "";
     return `<div class="enarratio-chart"${mark}>${result.html}</div>`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "enarratio-astro",
-  "version": "0.4.3",
+  "version": "0.4.4",
   "description": "Accessible charts for Astro: a Chart component and charts in Markdown, drawn on the server by Enarratio",
   "keywords": [
     "accessibility",

package/src/figure.ts

@@ -1,13 +1,25 @@
-import { escapeHtml } from "enarratio";
 import type { ChartResult } from "./chart.js";
 
+const ESCAPES: Readonly<Record<string, string>> = {
+  "&": "&amp;",
+  "<": "&lt;",
+  ">": "&gt;",
+  '"': "&quot;",
+  "'": "&#39;",
+};
+
+/** Escapes text for HTML. Local because Enarratio no longer exports its own (0.9.0). */
+function escapeText(value: string): string {
+  return value.replace(/[&<>"']/g, (ch) => ESCAPES[ch] ?? ch);
+}
+
 /**
  * The markup that goes on the page for a drawn chart, or for one that could not be drawn: the
  * chart in a wrapper (marked when it is interactive), or a note saying why.
  */
 export function chartMarkup(result: ChartResult, interactive: boolean): string {
   if (!result.ok) {
-    return `<p class="enarratio-chart-error" role="note">This chart could not be drawn. ${escapeHtml(result.error)}</p>`;
+    return `<p class="enarratio-chart-error" role="note">This chart could not be drawn. ${escapeText(result.error)}</p>`;
   }
   const mark = interactive ? " data-enarratio-interactive-chart" : "";
   return `<div class="enarratio-chart"${mark}>${result.html}</div>`;