From 5acdea0dc5c2f741891c8951dbf009d91ca333ff Mon Sep 17 00:00:00 2001
From: Rootless-Ghost/RG-Nebula
 <139057350+Rootless-Ghost@users.noreply.github.com>
Date: Mon, 13 Apr 2026 10:36:35 -0400
Subject: [PATCH] Potential fix for code scanning alert no. 8: Incomplete HTML
 attribute sanitization

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
---
 templates/library.html | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/templates/library.html b/templates/library.html
index de11f7b..f03d69b 100644
--- a/templates/library.html
+++ b/templates/library.html
@@ -184,7 +184,12 @@ <h1 class="page-title">Run History</h1>
 }
 
 function esc(s) {
-    return String(s).replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;');
+    return String(s)
+        .replace(/&/g,'&amp;')
+        .replace(/</g,'&lt;')
+        .replace(/>/g,'&gt;')
+        .replace(/"/g,'&quot;')
+        .replace(/'/g,'&#39;');
 }
 
 loadRuns();