Unescaped aria-label in md-nav elements

[reteps]

Context

With quotes in the right place, I can generate invalid HTML like so:

<nav class="md-nav" aria-label=""B">

Bug description

If I have a page like

# Page

## "B

The above header has an unescaped quote mark in the aria label (see the generated HTML snippet at the top of the report)

### C

I would expect the quotation mark to be escaped in the aria-label.

Related links

• Reporting a bug
• escape aria-labels to prevent breaking HTML markup #8053 (fix) Sanitize aria-label on toc-items #8052 (missing reproduction)

Reproduction

9.6.6-unescaped-aria-label-mark.zip

Steps to reproduce

1. run mkdocs build
2. inspect HTML file index.html, and observe invalid HTML

Browser

No response

Before submitting

• I have read and followed the bug reporting guidelines.
• I have attached links to the documentation, and possibly related issues and discussions.
• I assure that I have removed all customizations before submitting this bug report.
• I have attached a .zip file with a minimal reproduction using the built-in info plugin.

[squidfunk]

Thanks for reporting and providing the reproduction. @pawamoy, you added striptags in 3f978d8. Could you maybe check whether this change makes sense, and/or whether it does not break your requirements?

[pawamoy]

@squidfunk thanks for tagging. I don't ever use aria labels in any of my plugins so the change seems safe on my side 👍

[pawamoy]

As to whether it makes sense, even though the change seems good I find it surprising that the issue is only caught/reported now 🤔

[squidfunk]

Fixed in 27ba956 via #8053.

[squidfunk]

Released as part of 9.6.7.