From f12ff026168acb23953a386e36bcd7809fe25d97 Mon Sep 17 00:00:00 2001
From: yggverse <yggverse@bot>
Date: Tue, 16 Apr 2024 20:34:27 +0300
Subject: [PATCH] escape all url entities

---
 src/Pango.php | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/src/Pango.php b/src/Pango.php
index d6d82f4..3d9e636 100644
--- a/src/Pango.php
+++ b/src/Pango.php
@@ -166,7 +166,9 @@ class Pango
                 {
                     $lines[$index] = sprintf(
                         '<a href="%s">%s</a>',
-                        $address,
+                        self::escape(
+                            $address
+                        ),
                         self::escape(
                             $alt
                         )
@@ -177,7 +179,9 @@ class Pango
                 {
                     $lines[$index] = sprintf(
                         '<a href="%s" title="%s">%s</a>',
-                        $address,
+                        self::escape(
+                            $address
+                        ),
                         self::escape(
                             urldecode(
                                 $address