From a47dac2854083b1a57af9c154d1bc4b1a63fb764 Mon Sep 17 00:00:00 2001 From: alwxkxk Date: Mon, 29 Jul 2019 11:04:27 +0800 Subject: [PATCH] fix #3159 --- browser/lib/markdown-it-sanitize-html.js | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/browser/lib/markdown-it-sanitize-html.js b/browser/lib/markdown-it-sanitize-html.js index 3325604a..641216e3 100644 --- a/browser/lib/markdown-it-sanitize-html.js +++ b/browser/lib/markdown-it-sanitize-html.js @@ -96,6 +96,10 @@ function sanitizeInline (html, options) { function naughtyHRef (href, options) { // href = href.replace(/[\x00-\x20]+/g, '') + if (!href) { + // No href + return false + } href = href.replace(/<\!\-\-.*?\-\-\>/g, '') const matches = href.match(/^([a-zA-Z]+)\:/)