From ac10659ff8d634dba9ad29345180c8ac2804e8d6 Mon Sep 17 00:00:00 2001
From: baseballyama <xydybaseball@gmail.com>
Date: Fri, 31 Mar 2023 00:21:42 +0900
Subject: [PATCH] fix escape

---
 src/runtime/internal/ssr.ts                       | 2 +-
 test/runtime/samples/attribute-escape/_config.js  | 4 ++++
 test/runtime/samples/attribute-escape/main.svelte | 1 +
 3 files changed, 6 insertions(+), 1 deletion(-)
 create mode 100644 test/runtime/samples/attribute-escape/_config.js
 create mode 100644 test/runtime/samples/attribute-escape/main.svelte

diff --git a/src/runtime/internal/ssr.ts b/src/runtime/internal/ssr.ts
index e6d747dc18..432a9b3674 100644
--- a/src/runtime/internal/ssr.ts
+++ b/src/runtime/internal/ssr.ts
@@ -69,7 +69,7 @@ export function merge_ssr_styles(style_attribute, style_directive) {
 	return style_object;
 }
 
-const ATTR_REGEX = /[&"]/g;
+const ATTR_REGEX = /[&"<]/g;
 const CONTENT_REGEX = /[&<]/g;
 
 /**
diff --git a/test/runtime/samples/attribute-escape/_config.js b/test/runtime/samples/attribute-escape/_config.js
new file mode 100644
index 0000000000..25313f01dc
--- /dev/null
+++ b/test/runtime/samples/attribute-escape/_config.js
@@ -0,0 +1,4 @@
+export default {
+	html: '<textarea></textarea>',
+	ssrHtml: '<textarea>test\'"&gt;&lt;/textarea&gt;&lt;script&gt;alert(\'BIM\');&lt;/script&gt;</textarea>'
+};
diff --git a/test/runtime/samples/attribute-escape/main.svelte b/test/runtime/samples/attribute-escape/main.svelte
new file mode 100644
index 0000000000..1b1fdf62a0
--- /dev/null
+++ b/test/runtime/samples/attribute-escape/main.svelte
@@ -0,0 +1 @@
+<textarea value={`test'"></textarea><script>alert('BIM');</script>`} />