Function escapeSelectorValue

packages/platform-browser/src/browser/meta.ts:188–192

(value: string)

}

function escapeSelectorValue(value: string): string {
  // Escape backslashes and double quotes to prevent CSS selector injection.
  // This securely confines the value inside an attribute selector.
  return `"${value.replace(/\\/g, '\\\\').replace(/"/g, '\\"')}"`;
}

function containsAttributes(tag: MetaDefinition, elem: HTMLMetaElement): boolean {
  return Object.keys(tag).every((key) => elem.getAttribute(getMetaKeyMap(key)) === tag[key]);