refactor(response): use single-pass replace for HTML escaping

pi0 · claude · pi0 · commit 2df5d829e439 · 2026-03-16T10:52:11.000+01:00
Co-Authored-By: Claude Opus 4.6 (1M context) &lt;noreply@anthropic.com&gt;
diff --git a/src/utils/response.ts b/src/utils/response.ts
@@ -44,11 +44,7 @@ export function redirect(
   status: number = 302,
   statusText?: string,
 ): HTTPResponse {
-  const htmlLoc = location
-    .replace(/&/g, "&amp;")
-    .replace(/"/g, "&quot;")
-    .replace(/</g, "&lt;")
-    .replace(/>/g, "&gt;");
+  const htmlLoc = location.replace(/[&"<>]/g, (c) => ({ "&": "&amp;", '"': "&quot;", "<": "&lt;", ">": "&gt;" })[c]!);
   const body = /* html */ `<html><head><meta http-equiv="refresh" content="0; url=${htmlLoc}" /></head></html>`;
   return new HTTPResponse(body, {
     status,
