github/marktext
5
0
Fork 0
mirror of https://github.com/marktext/marktext.git synced 2025-05-03 03:50:27 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: prevent HTML rendering in preview mode (#2986)

Browse Source 
Prevent HTML rendering in preview mode if HTML rendering is disabled in
settings. We allow the img tag to support our image resizer.
This commit is contained in:
Felix Häusler 2022-02-07 11:55:45 +01:00 committed by GitHub
parent 1d4cd88b3e
commit 247a9e38e2
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 17 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
src/muya/lib/parser/index.js
View File

@ -32,12 +32,26 @@ const correctUrl = token => {
} }
} }
const matchHtmlTag = (src, disableHtml) => {
const match = inlineRules.html_tag.exec(src)
if (!match) {
return null
}
// Ignore HTML tag when HTML rendering is disabled and import it as plain text.
// NB: We have to allow img tag to support image resizer and options.
if (disableHtml && (!match[3] || !/^img$/i.test(match[3]))) {
return null
}
return match
}
const tokenizerFac = (src, beginRules, inlineRules, pos = 0, top, labels, options) => { const tokenizerFac = (src, beginRules, inlineRules, pos = 0, top, labels, options) => {
const originSrc = src const originSrc = src
const tokens = [] const tokens = []
let pending = '' let pending = ''
let pendingStartPos = pos let pendingStartPos = pos
const { superSubScript, footnote } = options const { disableHtml, superSubScript, footnote } = options
const pushPending = () => { const pushPending = () => {
if (pending) { if (pending) {
tokens.push({ tokens.push({
@ -427,7 +441,7 @@ const tokenizerFac = (src, beginRules, inlineRules, pos = 0, top, labels, option
} }
// html-tag // html-tag
const htmlTo = inlineRules.html_tag.exec(src) const htmlTo = matchHtmlTag(src, disableHtml)
let attrs let attrs
// handle comment // handle comment
if (htmlTo && htmlTo[1] && !htmlTo[3]) { if (htmlTo && htmlTo[1] && !htmlTo[3]) {
@ -448,8 +462,7 @@ const tokenizerFac = (src, beginRules, inlineRules, pos = 0, top, labels, option
src = src.substring(len) src = src.substring(len)
pos = pos + len pos = pos + len
continue continue
} } else if (htmlTo && !(disallowedHtmlTag.test(htmlTo[3])) && (attrs = getAttributes(htmlTo[0]))) {
if (htmlTo && !(disallowedHtmlTag.test(htmlTo[3])) && (attrs = getAttributes(htmlTo[0]))) {
const tag = htmlTo[3] const tag = htmlTo[3]
const html = htmlTo[0] const html = htmlTo[0]
const len = htmlTo[0].length const len = htmlTo[0].length