Function escapeCssUrl

packages/common/src/directives/ng_optimized_image/url.ts:50–62

(input: string)

}

export function escapeCssUrl(input: string): string {
  return (
    input
      // Backslash first — later replacements must not have their own \ escaped again.
      .replace(/\\/g, '\\\\')
      // \n, \r, \f and null terminate a CSS string (CSS Syntax 3 §4.3.5,
      // https://www.w3.org/TR/css-syntax-3/#consume-string-token) and are also
      // invalid in URLs, so stripping them is safe.
      .replace(/[\n\r\f\0]/g, '')
      // A bare " would close the url("...") wrapper early.
      .replace(/"/g, '\\"')
  );
}