Vytautas Šaltenis
55cd82008e
Rewrite protection against JavaScript injection
...
This drops the naive approach at <script> tag stripping and resorts to
full sanitization of html. The general idea (and the regexps) is grabbed
from Stack Exchange's PageDown JavaScript Markdown processor[1]. Like in
PageDown, it's implemented as a separate pass over resulting html.
Includes a metric ton (but not all) of test cases from here[2]. Several
are commented out since they don't pass yet.
Stronger (but still incomplete) fix for #11 .
[1] http://code.google.com/p/pagedown/wiki/PageDown
[2] https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet
2014-01-22 01:14:35 +02:00
David Kitchen
6e6572e913
Added th to table headers so that styling with things like Twitter Bootstrap and typeset.css work as expected. Cells in headers should always be TH unless they are advisory cells within headers in which case TD is acceptable (but being Markdown a user with such needs could just enter HTML for this)
2013-10-16 11:36:33 +01:00
moshee
7bdb82c53a
new tests pass but old tests now fail...
2013-06-26 15:57:51 +00:00
moshee
be082a1ef2
First attempt at supporting Pandoc-style footnotes. The existing tests have not broken but the new functionality does not work yet.
2013-06-25 01:18:47 +00:00
Russ Ross
a5441fd99f
updates for go 1
2012-03-07 21:36:31 -07:00
Russ Ross
bb8ee591d1
doc improvements, commenting
2011-07-07 11:56:45 -06:00
Russ Ross
2aca667078
simplify inline callback interface
2011-06-29 13:00:54 -06:00
Russ Ross
3c6f18afc7
Renderer is now an interface
2011-06-29 11:13:17 -06:00
Russ Ross
793fee5451
preparing for switch to rendering interface
2011-06-29 10:43:10 -06:00
Russ Ross
b1a0318250
refactoring: inline renderers return bools, preparing rendering struct to become an interface
2011-06-28 19:46:35 -06:00
Russ Ross
fde2c60665
version number, few more options for command-line tool
2011-06-28 11:30:10 -06:00
Russ Ross
f8f70572a4
simplified BSD license
2011-06-27 20:11:32 -06:00
Russ Ross
e22e43bf76
eliminate a buffering level for paragraphs
2011-06-26 17:21:11 -06:00
Russ Ross
eff64c563f
reduce copying for lists
2011-06-25 15:02:46 -06:00
Russ Ross
cf97fbd897
experiment: render headers directly to output buffer to avoid a copy; minor speed boost
2011-06-25 08:20:08 -06:00
Russ Ross
9d23b68fa5
export all names from Renderer struct
...
This enables new back-ends that are not part of the package
Basically a big search-and-replace for this commit
2011-05-30 21:44:52 -06:00
Russ Ross
ee3fe99203
rudimentary latex backend, additional cleanup
2011-05-30 11:06:20 -06:00
