Merge pull request #1244 from NASA-IMPACT/1101-bug-fix-quotes-not-escaped-in-titles

1101 bug fix quotes not escaped in titles

Author: CarsonDavis

CHANGELOG.md

@@ -100,3 +100,9 @@ For each PR made, an entry should be added to this changelog. It should contain
     - Added universal search functionality tests
     - Created search pane filter tests
     - Added pattern application form tests with validation checks
+
+- 1101-bug-fix-quotes-not-escaped-in-titles
+  - Description: Title rules that include single quotes show up correctly in the sinequa frontend (and the COSMOS api) but not in the delta urls page.
+  - Changes:
+    - Added `escapeHtml` function in the `delta_url_list.js` file to handle special character escaping correctly.
+    - Called this function while retrieving the titles in `getGeneratedTitleColumn()` and `getCuratedGeneratedTitleColumn()` functions.

sde_indexing_helper/static/js/delta_url_list.js

@@ -1208,12 +1208,22 @@ function getCuratedScrapedTitleColumn() {
   };
 }
 
+function escapeHtml(str) {
+  if (!str) return '';
+  return str
+    .replace(/&/g, '&')
+    .replace(/</g, '&lt;')
+    .replace(/>/g, '&gt;')
+    .replace(/"/g, '&quot;')
+    .replace(/'/g, '&#39;');
+}
+
 function getGeneratedTitleColumn() {
   return {
     data: "generated_title",
     width: "20%",
     render: function (data, type, row) {
-      return `<input type="text" class="form-control individual_title_input whiteText" value='${data}' data-generated-title-id=${row["generated_title_id"]
+      return `<input type="text" class="form-control individual_title_input whiteText" value="${escapeHtml(data)}" data-generated-title-id=${row["generated_title_id"]
         } data-match-pattern-type=${row["match_pattern_type"]
         } data-delta-urls-count=${row["delta_urls_count"]
         } data-url=${remove_protocol(row["url"])} />`;
@@ -1226,7 +1236,7 @@ function getCuratedGeneratedTitleColumn() {
     data: "generated_title",
     width: "20%",
     render: function (data, type, row) {
-      return `<input type="text" class="form-control individual_title_input whiteText" value='${data}' data-generated-title-id=${row["generated_title_id"]
+      return `<input type="text" class="form-control individual_title_input whiteText" value="${escapeHtml(data)}" data-generated-title-id=${row["generated_title_id"]
         } data-match-pattern-type=${row["match_pattern_type"]
         } data-curated-urls-count=${row["curated_urls_count"]
         } data-url=${remove_protocol(row["url"])} />`;