buffer: fix ampersand escaping in markURL

1 files changed, 4 insertions, 0 deletions

diff --git a/src/server/buffer.nim b/src/server/buffer.nim
index cffe33b1..6b214b4e 100644
--- a/src/server/buffer.nim
+++ b/src/server/buffer.nim
@@ -1796,6 +1796,9 @@ proc markURL*(buffer: Buffer; schemes: seq[string]) {.proxy.} =
               of '"':
                 data &= """
                 offset += 5
+              of '&':
+                data &= "&"
+                offset += 4
               else:
                 data &= c
               inc j
@@ -1812,6 +1815,7 @@ proc markURL*(buffer: Buffer; schemes: seq[string]) {.proxy.} =
             of '>': data &= ">"
             of '\'': data &= "'"
             of '"': data &= """
+            of '&': data &= "&"
             else: data &= c
             inc j
           let replacement = html.fragmentParsingAlgorithm(data)