amass/md
1
0
Fork 0
mirror of https://github.com/doocs/md.git synced 2025-01-22 20:04:39 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix: escape html (#506)
All checks were successful
Build and Deploy / build-and-deploy (push) Has been skipped
Details
Build and Push Docker Images / build (push) Has been skipped
Details

Browse Source
This commit is contained in:
Libin YANG 2025-01-06 09:28:52 +08:00 committed by GitHub
parent 4f73811f0e
commit 8f09acb06d
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 11 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
src/utils/renderer.ts
View File

@ -40,6 +40,16 @@ function buildTheme({ theme: _theme, fonts, size, isUseIndent }: IOpts): ThemeSt
} as ThemeStyles } as ThemeStyles
} }
function escapeHtml(text: string): string {
return text
.replace(/&/g, `&`) // 转义 &
.replace(/</g, `&lt;`) // 转义 <
.replace(/>/g, `&gt;`) // 转义 >
.replace(/"/g, `&quot;`) // 转义 "
.replace(/'/g, `&#39;`) // 转义 '
.replace(/`/g, `&#96;`) // 转义 `
}
function buildAddition(): string { function buildAddition(): string {
return ` return `
<style> <style>
@ -203,7 +213,7 @@ export function initRenderer(opts: IOpts) {
}, },
codespan({ text }: Tokens.Codespan): string { codespan({ text }: Tokens.Codespan): string {
const escapedText = text.replace(/</g, `&lt;`).replace(/>/g, `&gt;`) const escapedText = escapeHtml(text)
return styledContent(`codespan`, escapedText, `code`) return styledContent(`codespan`, escapedText, `code`)
}, },