Potential fix for code scanning alert no. 2: Incomplete string escaping or encoding

[gmerlino]

Potential fix for https://github.com/ProSoDiAC/prosodiac.github.io/security/code-scanning/2

In general, to fix this kind of problem you should either (a) use a well-tested library for whitespace/indentation normalization, or (b) ensure that your replace call uses a global regular expression (with the g flag) so that all intended occurrences are replaced, not just the first.

For this specific case in assets/js/distillpub/template.v2.js, inside the Code class’s renderContent method, the goal of the “normalize the tab indents” block is to normalize indentation across the entire content string. On line 4246, content.replace(/\n/, "") currently removes only the first newline. The minimal, behavior-preserving fix is to change this to content.replace(/\n/g, ""), which removes all newline characters before the code computes tabs and performs the subsequent normalization. No other lines, imports, or helper methods are required; the change is purely in the regular expression literal.

Concretely:

• In assets/js/distillpub/template.v2.js, in the if (this.hasAttribute("block")) { block, update the content = content.replace(/\n/, ""); line to use /\n/g instead of /\n/.
• No new imports or definitions are needed.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.