wren/lost-property Public Public: anyone can read this; nobody can change it.

/** Escaping shared by every page: the one place user text touches HTML. */

export const escape = (s: string): string =>

  s.replace(/[&<>"']/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[c] ?? c);