coop-cloud-chaos-patchs/outline
Archived
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Added additional escaping

Browse Source
This commit is contained in:
Jori Lallo
2016-08-02 11:36:15 +03:00
parent 4455877585
commit e0dd1d9a98
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
frontend/utils/markdown.js
View File

@ -3,7 +3,7 @@ import marked from 'marked';
import sanitizedRenderer from 'marked-sanitized'; import sanitizedRenderer from 'marked-sanitized';
import highlight from 'highlight.js'; import highlight from 'highlight.js';
import emojify from './emojify'; import emojify from './emojify';
import _escape from 'lodash/escape'; import _ from 'lodash';
slug.defaults.mode = 'rfc3986'; slug.defaults.mode = 'rfc3986';
@ -11,11 +11,11 @@ const Renderer = sanitizedRenderer(marked.Renderer);
const renderer = new Renderer(); const renderer = new Renderer();
renderer.code = (code, language) => { renderer.code = (code, language) => {
const validLang = !!(language && highlight.getLanguage(language)); const validLang = !!(language && highlight.getLanguage(language));
const highlighted = validLang ? highlight.highlight(language, code).value : _escape(code); const highlighted = validLang ? highlight.highlight(language, code).value : _.escape(code);
return `<pre><code class="hljs ${language}">${highlighted}</code></pre>`; return `<pre><code class="hljs ${_.escape(language)}">${highlighted}</code></pre>`;
}; };
renderer.heading = (text, level) => { renderer.heading = (text, level) => {
const headingSlug = slug(text); const headingSlug = _.escape(slug(text));
return ` return `
<h${level}> <h${level}>
${text} ${text}