export function escapeXmlText(value: string): string { return value .replace(/&/g, '&') .replace(//g, '>'); } // Use for user-controlled values written into XML attributes. Text nodes should // use escapeXmlText so quotes remain byte-compatible with previous output. export function escapeXmlAttribute(value: string): string { return escapeXmlText(value).replace(/"/g, '"').replace(/'/g, '''); }