Fix JavaScript Unicode escape sequences

thisispiers · Jul 21, 2023 · aaa8272 · aaa8272
1 parent 2f01bda
commit aaa8272
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/Escape.php b/Escape.php
@@ -37,7 +37,7 @@ public static function encode(
                 if ($format === 'html') {
                     $encoded_data .= '&#x' . $hex . ';';
                 } else if ($format === 'unicode') {
-                    $encoded_data .= '\\u' . $ord;
+                    $encoded_data .= '\\u{' . $hex . '}';
                 } else if ($format === 'css') {
                     $hex = str_pad($hex, 6, '0', \STR_PAD_LEFT);
                     $encoded_data .= '\\' . $hex;

diff --git a/composer.json b/composer.json
@@ -2,6 +2,7 @@
     "name": "thisispiers/xss-escape",
     "description": "A PHP implementation of OWASP Cross Site Scripting Prevention Cheat Sheet",
     "license": "LGPL-3.0-only",
+    "version": "1.0.1",
     "require": {
         "php": ">=7.1",
         "ext-mbstring": "*"