Fix incomplete string escaping

pklaschka · github-advanced-security[bot] · web-flow · commit 9f135fcd3b10 · 2025-11-25T01:07:30.000+01:00
Co-authored-by: Copilot Autofix powered by AI &lt;62310815+github-advanced-security[bot]@users.noreply.github.com&gt;
diff --git a/lib/common/escapeKey.ts b/lib/common/escapeKey.ts
@@ -1,3 +1,6 @@
 export function escapeKey(key: string): string {
-  return key.replaceAll(/{/g, "\\{");
+  // Escape all backslashes first
+  key = key.replace(/\\/g, "\\\\");
+  // Then escape curly braces
+  return key.replace(/[{]/g, "\\{");
 }

Original file line number	Diff line number	Diff line change
`@@ -1,3 +1,6 @@`
`1`	`1`	`export function escapeKey(key: string): string {`
`2`		`- return key.replaceAll(/{/g, "\\{");`
	`2`	`+ // Escape all backslashes first`
	`3`	`+ key = key.replace(/\\/g, "\\\\");`
	`4`	`+ // Then escape curly braces`
	`5`	`+ return key.replace(/[{]/g, "\\{");`
`3`	`6`	`}`