fix: iri-escape double-quot

Signed-off-by: Jan Kowalleck <[email protected]>

Author: jkowalleck

HISTORY.md

@@ -6,6 +6,8 @@ All notable changes to this project will be documented in this file.
 
 <!-- add unreleased items here -->
 
+* Fixed
+  * url-encode double-quote in urls. ([#1154] via [#])
 * Build
   * Use _TypeScript_ `v5.6.2` now, was `v5.5.3` (via [#1130]. [#1144])
   * Use _webpack_ `v5.95.0` now, was `v5.93.0` (via [#1138], [#1147])
@@ -14,6 +16,8 @@ All notable changes to this project will be documented in this file.
 [#1138]: https://github.com/CycloneDX/cyclonedx-javascript-library/pull/1138
 [#1144]: https://github.com/CycloneDX/cyclonedx-javascript-library/pull/1144
 [#1147]: https://github.com/CycloneDX/cyclonedx-javascript-library/pull/1147
+[#1154]: https://github.com/CycloneDX/cyclonedx-javascript-library/issues/1154
+[#]:
 
 ## 6.11.0 -- 2024-07-15
 

examples/node/javascript/example.cjs

@@ -31,6 +31,7 @@ bom.metadata.component = new CDX.Models.Component(
   'MyProject'
 )
 bom.metadata.component.licenses.add(lFac.makeFromString('MIT OR Apache-2.0'))
+bom.metadata.component.
 
 const componentA = new CDX.Models.Component(
   CDX.Enums.ComponentType.Library,

src/_helpers/uri.ts

@@ -24,7 +24,8 @@ const _ESCAPES: Array<[RegExp, string]> = [
   [/</g, '%3C'],
   [/>/g, '%3E'],
   [/\{/g, '%7B'],
-  [/}/g, '%7D']
+  [/}/g, '%7D'],
+  [/"/, '%%22']
 ]
 
 /**
@@ -34,10 +35,10 @@ const _ESCAPES: Array<[RegExp, string]> = [
  *
  * BEST EFFORT IMPLEMENTATION
  *
- * @see http://www.w3.org/TR/xmlschema-2/#anyURI
- * @see http://www.datypic.com/sc/xsd/t-xsd_anyURI.html
- * @see https://datatracker.ietf.org/doc/html/rfc2396
- * @see https://datatracker.ietf.org/doc/html/rfc3987
+ * @see {@kink http://www.w3.org/TR/xmlschema-2/#anyURI}
+ * @see {@kink http://www.datypic.com/sc/xsd/t-xsd_anyURI.html}
+ * @see {@kink https://datatracker.ietf.org/doc/html/rfc2396}
+ * @see {@kink https://datatracker.ietf.org/doc/html/rfc3987}
  */
 export function escapeUri<T extends (string | undefined)> (value: T): T {
   if (value === undefined) {