fix: self closing tags getting escaped

Author: scmmishra

src/string.ts

@@ -32,7 +32,7 @@ export function parseBoolean(candidate: string | number) {
  * - Complex nested quotes or edge cases may not be handled perfectly
  * - For more complex HTML sanitization needs, consider using a proper HTML parser
  *
- * @param {string} text - The text to sanitize. Can be null or undefined.
+ * @param {string | null | undefined} text - The text to sanitize. Can be null or undefined.
  * @returns {string} The sanitized text safe for HTML rendering, or the original value if null/undefined.
  *
  * @example
@@ -42,7 +42,7 @@ export function parseBoolean(candidate: string | number) {
  * sanitizeTextForRender('Price < $100 <strong>Sale!</strong>') // 'Price &lt; $100 <strong>Sale!</strong>'
  */
 export function sanitizeTextForRender(text: string | null | undefined) {
-  if (!text) return text;
+  if (!text) return '';
 
   return (
     text
@@ -72,8 +72,9 @@ export function sanitizeTextForRender(text: string | null | undefined) {
       //     \s+    - whitespace before attributes
       //     [^>]*  - any characters except '>' (attribute content)
       //   )?       - attributes are optional
+      //   \/?      - optional self-closing slash before >
       // )          - end lookbehind
       // >          - matches '>'
-      .replace(/(?<!<\/?\w+(?:\s+[^>]*)?)>/g, '&gt;')
+      .replace(/(?<!<\/?\w+(?:\s+[^>]*)?\/?)>/g, '&gt;')
   );
 }

test/string.test.ts

@@ -148,4 +148,19 @@ describe('#sanitizeTextForRender', () => {
     const expected = `Original message:<br>&gt; User wrote: x &lt; 5<br><blockquote>Previous reply</blockquote>`;
     expect(sanitizeTextForRender(quoted)).toBe(expected);
   });
+
+  it('should handle self-closing tags correctly', () => {
+    expect(sanitizeTextForRender('<br />')).toBe('<br />');
+    expect(sanitizeTextForRender('<img src="test.jpg" />')).toBe('<img src="test.jpg" />');
+    expect(sanitizeTextForRender('<input type="text" value="test" />')).toBe('<input type="text" value="test" />');
+    expect(sanitizeTextForRender('<hr/>')).toBe('<hr/>');
+    expect(sanitizeTextForRender('Text before <br /> text after')).toBe('Text before <br /> text after');
+    expect(sanitizeTextForRender('<meta charset="UTF-8" />')).toBe('<meta charset="UTF-8" />');
+  });
+
+  it('should handle complex URLs in attributes', () => {
+    expect(sanitizeTextForRender('<img src="https://example.com/image.jpg?width=100&height=200&format=webp" />')).toBe('<img src="https://example.com/image.jpg?width=100&height=200&format=webp" />');
+    expect(sanitizeTextForRender('<a href="https://api.example.com/v2/users/123/profile?include=posts&sort=desc">Profile</a>')).toBe('<a href="https://api.example.com/v2/users/123/profile?include=posts&sort=desc">Profile</a>');
+    expect(sanitizeTextForRender('<iframe src="//cdn.example.com/embed/video/12345?autoplay=1&loop=0" />')).toBe('<iframe src="//cdn.example.com/embed/video/12345?autoplay=1&loop=0" />');
+  });
 });