escape data-warning attr

make-pages/BuilderQQ.hs

@@ -2,7 +2,7 @@
 module BuilderQQ
   (b,
    Builder, toLazyText, fromText, fromString, fromChar,
-   textMap, ifJust, escId)
+   textMap, ifJust, escId, escAttr)
 where
 
 import Data.Char (isLower, isSpace, isDigit, isAlphaNum)
@@ -159,6 +159,14 @@ escId = foldMap esc1 . Text.unpack where
   latin1Special c =
     c <= 'ÿ' && not (isAlphaNum c) && c /= '-'
 
+escAttr :: Text -> Builder
+escAttr = foldMap esc1 . Text.unpack where
+  esc1 '<'  = "&lt;"
+  esc1 '>'  = "&gt;"
+  esc1 '"'  = "&quot;"
+  esc1 '\'' = "&apos;"
+  esc1 c    = fromChar c
+
 
 class CanBuild a where
   build :: a -> Builder

make-pages/SinglePage.hs

@@ -173,7 +173,7 @@ altButton i (Image {label, path, nsfw, warning}) (Size {width, height}) = [b|@4
   checked        = if i == 0 then [b| checked|] else ""
   idLabel        = escId label
   path'          = pageFile path
-  warning'       = ifJust warning \w -> [b| data-warning="$w"|]
+  warning'       = ifJust warning \(escAttr -> w) -> [b| data-warning="$w"|]
 
 makeTags :: FilePath -> [Strict.Text] -> Builder
 makeTags undir tags =