From be67b887c379129db2cdb5b6b6ddb9a61fc61ebd Mon Sep 17 00:00:00 2001
From: Daniel <845765@qq.com>
Date: Sun, 28 Dec 2025 15:36:00 +0800
Subject: [PATCH] :bug: Attribute values are not escaped
 https://github.com/siyuan-note/siyuan/pull/16712
 https://github.com/siyuan-note/siyuan/issues/16686

Signed-off-by: Daniel <845765@qq.com>
---
 kernel/filesys/tree.go | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/kernel/filesys/tree.go b/kernel/filesys/tree.go
index ecb6a22fb..6c66cc984 100644
--- a/kernel/filesys/tree.go
+++ b/kernel/filesys/tree.go
@@ -294,7 +294,9 @@ func parseJSON2Tree(boxID, p string, jsonData []byte, luteEngine *lute.Lute) (re
 		needFix = true
 	}
 
-	if escapeAttributeValues(ret) {
+	if escapeAttributeValues(ret) { // TODO 划于 2026 年 6 月 30 日后删除
+		// v3.5.1 https://github.com/siyuan-note/siyuan/pull/16657 引入的问题，属性值未转义
+		// v3.5.2 https://github.com/siyuan-note/siyuan/issues/16686 进行了修复，并加了订正逻辑 https://github.com/siyuan-note/siyuan/pull/16712
 		needFix = true
 	}