lexer: validate the lexed attribute names

Check that the lexed attribute names are valid HTML attributes. Valid attribute names include things like '(click)'.
matheusmoreira · Aug 26, 2023 · 821d836 · 821d836
1 parent 31d510a
commit 821d836
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/packages/pugneum-lexer/index.js b/packages/pugneum-lexer/index.js
@@ -895,6 +895,14 @@ Lexer.prototype = {
       }
     }
 
+    let invalid = key.replaceAll(attributeName, '');
+    if (invalid.length !== 0) {
+        this.error(
+          'INVALID_ATTRIBUTE_NAME',
+          'Code points not allowed in HTML attribute names: ' + invalid
+        );
+    }
+
     tok.name = key;
 
     var valueResponse = this.attributeValue(str.substr(i));