From 541d4396d511609facfb477a1388aa6b775fe207 Mon Sep 17 00:00:00 2001
From: emad <ea@ea.sa>
Date: Fri, 17 Apr 2026 20:22:25 +0300
Subject: [PATCH] fix: escape each angle-bracket placeholder in JSDoc
 independently
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The ref generator escapes JSDoc angle brackets so that placeholders like
`<token>` render as text rather than HTML tags. The previous regex,
`/<(.+)>/` applied in a loop, is greedy: on a line like

    https://api.telegram.org/file/bot<token>/<file_path>

it matches from the first `<` to the last `>`, producing a single
replacement that leaves the middle `>/<` untouched. The result is
`bot&lt;token>/<file_path&gt;`, which the browser then parses as broken
HTML — the root cause of the broken `Context#getFile` reference page in
#1027.

Switch to a single non-backtracking pass with `[^<>]+` inside the
capture group so each placeholder is handled on its own, and drop the
while loop. Works on any number of placeholders per line without
swallowing intermediate characters.

Closes #1027.
---
 site/api/components/P.tsx | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/site/api/components/P.tsx b/site/api/components/P.tsx
index b2be4ed3d0..4a40c9be90 100644
--- a/site/api/components/P.tsx
+++ b/site/api/components/P.tsx
@@ -21,9 +21,11 @@ export function P(
         continue;
       }
       if (!inCodeBlock) {
-        while (/<.+>/.test(part)) {
-          part = part.replace(/<(.+)>/, "&lt;$1&gt;");
-        }
+        // Escape each pair of angle brackets individually. The inner class
+        // `[^<>]+` keeps a single `<...>` from greedily swallowing every
+        // bracketed placeholder in the same sentence — see
+        // https://github.com/grammyjs/website/issues/1027.
+        part = part.replace(/<([^<>]+)>/g, "&lt;$1&gt;");
         newParts.push(part);
       } else {
         newParts.push(part);