pl2html 0.5.1__tar.gz → 0.6.0__tar.gz

{pl2html-0.5.1 → pl2html-0.6.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: pl2html
-Version: 0.5.1
+Version: 0.6.0
 Summary: Add your description here
 Requires-Dist: polars>=1.42.1
 Requires-Python: >=3.14

pl2html-0.6.0/pl2html/__init__.py

@@ -0,0 +1 @@
+__version__ = '0.6.0'

{pl2html-0.5.1 → pl2html-0.6.0}/pl2html/compiler.py

@@ -1,3 +1,5 @@
+from html import escape as _escape
+
 from polars import (
     DataFrame as _DataFrame,
     DataType as _DataType,
@@ -104,8 +106,13 @@ def _build_cell_expr(
 
 def _build_html_skeleton(visible_columns: list[str]) -> tuple[_Expr, _Expr]:
     header_parts = ['<table>', '  <thead>\n    <tr>']
+
     for c in visible_columns:
-        header_parts.append(f'      <th>{c}</th>')
+        # NOTE: quote=False allows names like `Alice's "score"` to render naturally.
+        # This is safe ONLY because the string is confined strictly inside text nodes (<th>).
+        # DO NOT reuse these variables within HTML attributes.
+        header_parts.append(f'      <th>{_escape(c, quote=False)}</th>')
+
     header_parts.append('    </tr>\n  </thead>\n  <tbody>')
 
     html_header = _lit('\n'.join(header_parts) + '\n')

{pl2html-0.5.1 → pl2html-0.6.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = 'uv_build'
 
 [project]
 name = "pl2html"
-version = "0.5.1"
+version = "0.6.0"
 description = "Add your description here"
 readme = "README.md"
 requires-python = ">=3.14"

pl2html-0.5.1/pl2html/__init__.py

@@ -1 +0,0 @@
-__version__ = '0.5.1'