Nguyen Viet Hung
592aca1539
fixed eslint error & integrated with prettier as well as formatted the whole codebase ( #3450 )
2020-02-05 09:28:27 +09:00
alwxkxk
a47dac2854
fix #3159
2019-08-24 13:38:09 +09:00
amedora
606be4304d
Fix 3007 ( #3028 )
...
* fix code fences never sanitized
* fix mermaid xss
* Revert "fix mermaid xss"
This reverts commit 1ff179a1bd .
* configuable mermaid HTML label
* add locales for mermaid configuration
2019-07-27 12:39:12 +09:00
Baptiste Augrain
c5bcfe6ab3
Merge branch 'master' into fence-attrs
2018-11-06 09:35:59 +01:00
Baptiste Augrain
b03c2a1f80
fix XSS bug
2018-09-15 15:24:59 +02:00
Baptiste Augrain
bacbfc8615
add test
2018-09-15 10:43:41 +02:00
Baptiste Augrain
2a838ebb0b
fixing single quoted attributes
2018-08-26 00:14:29 +02:00
Baptiste Augrain
fabc975b20
- fix lint errors
...
- correctly parse self-closed tag
- fix naughty functions
2018-08-25 23:36:43 +02:00
Baptiste Augrain
3bdc88cecb
fixing sanitization of inline html like (<kbd>) #1992
2018-08-25 23:14:05 +02:00
Nguyen Viet Hung
f0df787bbe
Fix escape codeblock ( #2230 )
...
* updated package-lock
* added fix and test for escape html in code block
* fixed markdown preview render bug
* updated comment in escape function
* improved escape function
* Delete package-lock.json
2018-08-09 17:08:52 +09:00
Junyoung Choi
1d9b3ac2b5
Add sanitization for code fence
2018-07-07 01:22:11 +09:00
Sander Steenhuis
9344fd78d8
Remove xss attack; closes #1443 at least partially
2018-03-04 17:28:41 +01:00