Avatar for the withastro user
withastro
astro
BlogDocsChangelog

fix: harden attribute escaping

#15740Merged
Comparing
sec-attr-amp
(
3ec0f35
) with
main
(
e6e146c
)
CodSpeed Performance Gauge
0%
Untouched
18

Benchmarks

18 total
Build: full static site
benchmark/bench/build-static.bench.js::Bench build time
CodSpeed Performance Gauge
+1%
3.7 s3.7 s
large-array [streaming]
benchmark/bench/rendering-perf.bench.js::Rendering perf (streaming)
CodSpeed Performance Gauge
0%
149.4 ms148.9 ms
Rendering: streaming [false], .astro file
benchmark/bench/render.bench.js::Bench rendering
CodSpeed Performance Gauge
0%
195.6 ms194.9 ms
Rendering: streaming [true], .astro file
benchmark/bench/render.bench.js::Bench rendering
CodSpeed Performance Gauge
0%
214.1 ms213.4 ms
many-components [streaming]
benchmark/bench/rendering-perf.bench.js::Rendering perf (streaming)
CodSpeed Performance Gauge
0%
7.9 ms7.9 ms
many-head-elements (head dedup)
benchmark/bench/rendering-perf.bench.js::Rendering perf (non-streaming)
CodSpeed Performance Gauge
0%
5.2 ms5.2 ms
Build: hybrid site (static + server)
benchmark/bench/build-hybrid.bench.js::Bench build time
CodSpeed Performance Gauge
0%
8 s7.9 s
Rendering: streaming [true], .md file
benchmark/bench/render.bench.js::Bench rendering
CodSpeed Performance Gauge
0%
1.2 ms1.2 ms
Rendering: streaming [true], .mdx file
benchmark/bench/render.bench.js::Bench rendering
CodSpeed Performance Gauge
0%
572.6 ms572.7 ms
large-array (BufferedRenderer per child)
benchmark/bench/rendering-perf.bench.js::Rendering perf (non-streaming)
CodSpeed Performance Gauge
0%
158.9 ms158.9 ms
many-slots (eager slot prerendering)
benchmark/bench/rendering-perf.bench.js::Rendering perf (non-streaming)
CodSpeed Performance Gauge
0%
5.4 ms5.4 ms
many-components (markHTMLString, isHTMLString, validateProps)
benchmark/bench/rendering-perf.bench.js::Rendering perf (non-streaming)
CodSpeed Performance Gauge
0%
8.6 ms8.6 ms
static-heavy (markHTMLString baseline)
benchmark/bench/rendering-perf.bench.js::Rendering perf (non-streaming)
CodSpeed Performance Gauge
0%
6 ms6 ms
Rendering: streaming [false], .md file
benchmark/bench/render.bench.js::Bench rendering
CodSpeed Performance Gauge
0%
1.1 ms1.1 ms
Build: full server site
benchmark/bench/build-server.bench.js::Bench build time
CodSpeed Performance Gauge
0%
8.5 s8.6 s
many-expressions (renderChild dispatch, escapeHTML)
benchmark/bench/rendering-perf.bench.js::Rendering perf (non-streaming)
CodSpeed Performance Gauge
-1%
23.6 ms23.7 ms
many-expressions [streaming]
benchmark/bench/rendering-perf.bench.js::Rendering perf (streaming)
CodSpeed Performance Gauge
-1%
23.4 ms23.5 ms
Rendering: streaming [false], .mdx file
benchmark/bench/render.bench.js::Bench rendering
CodSpeed Performance Gauge
-1%
588.3 ms592.7 ms

Commits

Click on a commit to change the comparison range
Base
main
e6e146c
-0.02%
fix: harden attribute escaping by removing URL escape bypass
3ec0f35
11 days ago
by matthewp
© 2026 CodSpeed Technology
Home Terms Privacy Docs