{"version":"2.1.238","anchor":"safer-escaping-in-generated-html-output","canonical_anchor":"safer-escaping-in-generated-html-output","heading":"Safer escaping in generated HTML output","tier":"internal","area":"Artifacts","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.238\/e\/safer-escaping-in-generated-html-output","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.238","markdown":"### Safer escaping in generated HTML output\n\nGenerated HTML escapes control and separator characters more safely.\n\n**What**\n\nControl characters and the Unicode line and paragraph separators are now written as numeric HTML entities in generated HTML, and titles and summaries collapse runs of whitespace after stripping.\n\n**Details**\n\n- A URL decoder was replaced with a guarded `decodeURIComponent` that returns the raw input when decoding fails instead of throwing.\n\n**Evidence**\n\n`decodeURIComponent`\n\n- Area: Artifacts\n- Tier: Under the hood\n- Useful: 1\/5\n- Signal: 1\/5"}