fix: decode escaped XML

codegen/smithy-aws-typescript-codegen/src/main/java/software/amazon/smithy/aws/typescript/codegen/AwsProtocolUtils.java

@@ -29,6 +29,7 @@
 import software.amazon.smithy.model.traits.XmlNamespaceTrait;
 import software.amazon.smithy.typescript.codegen.TypeScriptWriter;
 import software.amazon.smithy.typescript.codegen.integration.ProtocolGenerator.GenerationContext;
+import software.amazon.smithy.utils.IoUtils;
 
 /**
  * Utility methods for generating AWS protocols.
@@ -112,6 +113,9 @@ static void generateJsonParseBody(GenerationContext context) {
     static void generateXmlParseBody(GenerationContext context) {
         TypeScriptWriter writer = context.getWriter();
 
+        // Include function that decodes XML escape characters.
+        writer.write(IoUtils.readUtf8Resource(AwsProtocolUtils.class, "decodeEscapedXML.ts"));
+
         // Include an XML body parser used to deserialize documents from HTTP responses.
         writer.addImport("SerdeContext", "__SerdeContext", "@aws-sdk/types");
         writer.addDependency(AwsDependency.XML_PARSER);
@@ -120,7 +124,8 @@ static void generateXmlParseBody(GenerationContext context) {
             writer.openBlock("return collectBodyString(streamBody, context).then(encoded => {", "});", () -> {
                 writer.openBlock("if (encoded.length) {", "}", () -> {
                     writer.write("const parsedObj = xmlParse(encoded, { attributeNamePrefix: '', "
-                            + "ignoreAttributes: false, parseNodeValue: false });");
+                            + "ignoreAttributes: false, parseNodeValue: false, tagValueProcessor: (val, tagName) "
+                            + "=> decodeEscapedXML(val) });");
                     writer.write("return parsedObj[Object.keys(parsedObj)[0]];");
                 });
                 writer.write("return {};");

codegen/smithy-aws-typescript-codegen/src/main/resources/software/amazon/smithy/aws/typescript/codegen/decodeEscapedXML.ts

@@ -0,0 +1,8 @@
+const decodeEscapedXML = (str: string) => {
+  return str
+    .replace(/&/g, "&")
+    .replace(/'/g, "'")
+    .replace(/"/g, '"')
+    .replace(/>/g, ">")
+    .replace(/&lt;/g, "<");
+};