Function htmlAttrEscape

apps/server/internal/httpserver/server.go:1070–1078

htmlAttrEscape escapes the characters that would let a base-path value break out of a double-quoted HTML attribute.

(value string)

// htmlAttrEscape escapes the characters that would let a base-path
// value break out of a double-quoted HTML attribute.
func htmlAttrEscape(value string) string {
	replacer := strings.NewReplacer(
		"&", "&",
		"\"", """,
		"<", "&lt;",
		">", "&gt;",
	)
	return replacer.Replace(value)
}

func indexOfFold(haystack, needle []byte) int {
	n := len(needle)