Miguel Ángel c0ffdc0fb0 fix(core,studio): escape user values in querySelector attribute selectors ...

Extract cssAttrSelector to packages/core/src/utils/cssSelector.ts and
use it (or CSS.escape for browser-side code) at all 12 sites that
previously interpolated raw user-authored values into querySelector
attribute selectors. A " in a composition ID, script src, or
data-start value would produce a malformed selector that throws.

Node-side (core compiler/parser): uses the shared cssAttrSelector.
Browser-side (runtime, studio): uses native CSS.escape().

Supersedes #1568 which fixed only the 3 bundler sites.

2026-06-19 15:47:28 -04:00

..

components

feat(studio): timeline inline expansion + __clipTree runtime primitive

2026-06-15 22:16:29 -04:00

hooks

feat(studio): timeline inline expansion + __clipTree runtime primitive

2026-06-15 22:16:29 -04:00

lib

fix(core,studio): escape user values in querySelector attribute selectors

2026-06-19 15:47:28 -04:00

store

feat(studio): timeline inline expansion + __clipTree runtime primitive

2026-06-15 22:16:29 -04:00

index.ts

fix(studio): support web-component refs in useTimelinePlayer (#245)

2026-04-13 17:53:01 +02:00