Required escaping missing in version 2

[Allain55]

Hi, v2 doesn't escape the '&' sign everywhere, but '&' needs to be always escaped

For example:
"capacité"

Result in v1 (as it should be):
"capacité"

Result in v2 is unchanged, not escaped

In v1 I use these filters:

'<' : '&lt;',
'>' : '&gt;',
'"' : '&quot;',
'\'': '&apos;',
'&' : '&amp;'

In v2 using the same settings doesn't work

For reference see:
https://www.freeformatter.com/xml-escape.html

Related to #41

I added some checks to make sure things won't be double-encoded.

Maybe this caused the problem?

[davidcalhoun]

Hi, thank you for the heads up! That is indeed what's happening - jstoxml sees that é (é) is already entity encoded, and it's leaving it as-is. The same thing happens when it runs across & (&) - because it wouldn't make sense to output & (running it through again would unfortunately end up triple-encoding it to &, and so on).

I am not sure what's going on in your use case, but I could see that it may be useful to force turning off the double-encoding check. Will look into what it would take to add that.

[Allain55]

How about disallow double-encoding only for these values:

& (&)
&lt; (<)
&gt; (>)
&quot; (")
&apos; (\)

[davidcalhoun]

Sorry for the delay! You can now achieve these sort of results by passing in a custom contentMap() function which runs after the the replacements have been made. In your case you should be able to do something like this:

toXML(obj, {
  contentMap: (val) => val.replaceAll('&', '&')
});