Method _escapeSelectorValue

packages/platform-browser/src/browser/meta.ts:194–198

(value: string)

  }

  private _escapeSelectorValue(value: string): string {
    // Escape backslashes and double quotes to prevent CSS selector injection.
    // This securely confines the value inside an attribute selector.
    return `"${value.replace(/\\/g, '\\\\').replace(/"/g, '\\"')}"`;
  }

  private _containsAttributes(tag: MetaDefinition, elem: HTMLMetaElement): boolean {
    return Object.keys(tag).every(