2 files changed, 4 insertions, 2 deletions
diff --git a/vhosts/blog/nuldoc-src/renderers/html.ts b/vhosts/blog/nuldoc-src/renderers/html.ts
index dee9a0cc..70d097b2 100644
--- a/vhosts/blog/nuldoc-src/renderers/html.ts
+++ b/vhosts/blog/nuldoc-src/renderers/html.ts
@@ -174,7 +174,9 @@ function elementNodeToHtmlText(e: Element, ctx: Context): string {
       s += " ";
       for (let i = 0; i < attributes.length; i++) {
         const [name, value] = attributes[i];
-        s += `${name === "className" ? "class" : name}="${value}"`;
+        s += `${name === "className" ? "class" : name}="${
+          encodeSpecialCharacters(value)
+        }"`;
         if (i !== attributes.length - 1) {
           s += " ";
         }
diff --git a/vhosts/blog/nuldoc-src/renderers/xml.ts b/vhosts/blog/nuldoc-src/renderers/xml.ts
index c3293d17..69b8266c 100644
--- a/vhosts/blog/nuldoc-src/renderers/xml.ts
+++ b/vhosts/blog/nuldoc-src/renderers/xml.ts
@@ -72,7 +72,7 @@ function elementNodeToXmlText(e: Element, ctx: Context): string {
       s += " ";
       for (let i = 0; i < attributes.length; i++) {
         const [name, value] = attributes[i];
-        s += `${name}="${value}"`;
+        s += `${name}="${encodeSpecialCharacters(value)}"`;
         if (i !== attributes.length - 1) {
           s += " ";
         }