public/homebrewery
1
0
Fork 0
mirror of https://github.com/stolksdorf/homebrewery.git synced 2025-12-12 23:35:58 +00:00
Code Issues Releases Wiki Activity

Added in a function to sanatize script tags specifically

Browse Source
This commit is contained in:
Scott Tolksdorf
2018-11-26 19:46:51 -05:00
committed by Rae2che5
parent 8b04cc9269
commit 20b719d0de
2 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
package.json
View File

@@ -1,7 +1,7 @@
{ {
"name": "homebrewery", "name": "homebrewery",
"description": "Create authentic looking D&D homebrews using only markdown", "description": "Create authentic looking D&D homebrews using only markdown",
"version": "2.8.0", "version": "2.8.1",
"repository": { "repository": {
"type": "git", "type": "git",
"url": "git://github.com/stolksdorf/homebrewery.git" "url": "git://github.com/stolksdorf/homebrewery.git"

10
shared/naturalcrit/markdown.js
View File

@@ -13,6 +13,11 @@ renderer.html = function (html) {
return html; return html;
}; };
const sanatizeScriptTags = (content)=>{
return content
.replace(/<script/g, '&lt;script')
.replace(/<\/script>/g, '&lt;/script&gt;');
};
const tagTypes = ['div', 'span', 'a']; const tagTypes = ['div', 'span', 'a'];
const tagRegex = new RegExp(`(${ const tagRegex = new RegExp(`(${
@@ -24,7 +29,10 @@ const tagRegex = new RegExp(`(${
module.exports = { module.exports = {
marked : Markdown, marked : Markdown,
render : (rawBrewText)=>{ render : (rawBrewText)=>{
return Markdown(rawBrewText, { renderer: renderer }); return Markdown(
sanatizeScriptTags(rawBrewText),
{ renderer: renderer }
);
}, },
validate : (rawBrewText)=>{ validate : (rawBrewText)=>{