codewalker/marked
1
0
Fork 0
Code Pull Requests Actions Packages Releases Activity
2,322 Commits 1 Branch 191 Tags
Commit Graph

694 Commits

Author SHA1 Message Date
rich
d604680a6a Prevent matching other content that starts with these words 2018-09-16 15:57:12 +01:00
rich
f09095ef0e Use neater alternation in regexes for improved readability 2018-09-16 08:16:33 +01:00
rich
4ba30dba6b [#1334] turn off typographic substitution in certain blocks 2018-09-15 11:22:47 +01:00
Костя Третяк
eb9f08cbb3 Refactoring the old escape() function improved performance on 30-40% 2018-09-11 17:18:38 +03:00
Raphaël Huchet
c4851d0492
update copyright 2018-08-27 10:22:45 +02:00
Barry Woolgar
431884f6a6 Remove commented line 2018-08-15 15:39:24 +01:00
Barry Woolgar
0ba25227cd Exclude punctuation to make 333, 450, 452, 505, and 535, pass 2018-08-03 19:49:10 +01:00
barrywoolgar
a4460a9301
Updated inline grammer regexes for strong and em 
Attempt to match special case single character matches before the more permissive standard regexes
 2018-08-02 18:27:40 +01:00
Josh Bruce
706e07dbad
Merge pull request #1304 from UziTech/loose-lists 
loose lists
 2018-07-14 18:33:29 -04:00
Steven
c7d487e452
Merge pull request #1258 from tomtheisen/gfm-strike 
GFM strikethrough compatibility
 2018-07-09 12:34:01 -04:00
Steven
51cd03f525
Merge pull request #1305 from Trott/enable-468 
enable CommonMark spec 468
 2018-07-06 15:46:55 -04:00
Steven
2f86d9439f
Merge pull request #1303 from aduh95/patch-1 
add hard line break when backslash at EOL
 2018-07-06 15:42:28 -04:00
Steven
485fcae321
Merge pull request #1293 from Trott/trailing-period 
fix gfm extended autolinking requiring multiple backpedals
 2018-07-05 09:55:57 -04:00
Rich Trott
9c976cda1c enable CommonMark spec 468 
A minor adjustment to the href-matching regexp permits CommonMark spec
468 to pass. All other passing specs are unaffected.

The regexp was incorrectly excluding parentheses as valid characters in
a URL.
 2018-07-03 11:43:01 -07:00
Tony Brix
b167cd410c remove loose_item_start token 
fixes #469
 2018-07-03 08:33:51 -05:00
Tony Brix
a22ef0f4a4 loose lists 2018-07-03 08:23:03 -05:00
Antoine du Hamel
47cf2b2cf2
add hard line break when backslash at EOL 
A backslash at the end of the line is a hard line break.

Ref: https://spec.commonmark.org/0.28/#example-293
 2018-07-03 10:43:21 +02:00
Rich Trott
04e04b10d4 fix issues link references and prototypes 
Link with names that clashed with properties inherited from the
Object prototype (such as "constructor") were not expanding. This fixes
this issue.

Before this change, markdown of this form...:

    Link: [constructor][].

    [constructor]: https://example.org/

...resulted in HTML output of this form:

    <p>Link: [constructor][].</p>

With this change, it now renders as expected:

    <p>Link: <a href="https://example.org/">constructor</a>.</p>
 2018-06-28 13:41:43 -07:00
Rich Trott
a3cddeeae6 fix gfm extended autolinking requiring multiple backpedals 
Add a test and fix that trailing punctuation is omitted in link URLs for
markdown like this:

    (See https://www.example.com/fhqwhgads.)

The trailing period and closing parenthesis should not be part of the
link URL.
 2018-06-22 13:51:48 -07:00
Steven
05e322c69b
Merge pull request #1262 from UziTech/table-cells 
Fix table cells
 2018-06-12 11:49:29 -04:00
Tony Brix
898f61294d add comments for clarity 2018-06-04 15:23:55 -05:00
Steven
37a9f1f742
Merge pull request #1260 from davisjam/Rtrim 
security: use rtrim, not unsafe /X+$/
 2018-06-03 15:26:46 -04:00
Jamie Davis
0610f9f9a4 remove unnecessary if check 2018-06-02 14:12:17 -04:00
Jamie Davis
2e05c777ac address review comments 2018-06-02 01:24:55 -04:00
Steven
0bc2fc5b6d
Merge pull request #1265 from remyrylan/master 
CommonMark code block class names
 2018-05-11 13:29:38 -04:00
Remy Rylan
6ab2593530 Remove extra inner linebreak from code blocks 2018-05-11 11:20:29 -04:00
Remy Rylan
7b1d0be249 Update fenced code blocks to CommonMark standard 2018-05-11 11:12:12 -04:00
Tony Brix
2c17a5a1ec test pass 2018-05-09 16:27:30 -05:00
Jamie Davis
7e5a72703d security: rtrim, not unsafe /X+$/ idiom 
Problem:
replace(/X+$/, '') is vulnerable to REDOS

Solution:
Replace all instances I could find with a custom rtrim
 2018-05-09 11:07:20 -04:00
Tom Theisen
22b17fec26 Merge branch 'master' of https://github.com/markedjs/marked into gfm-strike 2018-05-08 20:32:01 -07:00
Steven
42c3915242
Merge pull request #1250 from tomtheisen/gfm-tasks 
GFM compliance for tasks lists
 2018-05-08 11:26:46 -04:00
Tom Theisen
1420eb3435 Strikethrough support for GFM 2018-05-05 08:21:32 -07:00
Tom Theisen
b083a1a307 space following task checkbox 2018-05-03 19:52:57 -07:00
Tom Theisen
aa73bb6ea7 add space to task regex and disable xhtml for gfm testing 2018-05-03 19:51:31 -07:00
Tom Theisen
7482990131 GFM compliance for tasks 2018-05-02 20:17:13 -07:00
Tony Brix
9d5ecbe565 fix paragraph 2018-05-02 12:05:36 -05:00
Tony Brix
ee463d4267 add back q mark 2018-05-02 08:41:30 -05:00
Tom Theisen
b78deebfcf lint 2018-04-30 20:11:43 -07:00
Tom Theisen
be922cecdd GFM table compliance 2018-04-30 20:11:01 -07:00
Tom Theisen
e4973edfed lint 2018-04-24 21:20:10 -07:00
Tom Theisen
bbdf191931 handle escaped pipes in gfm tables 2018-04-24 21:19:14 -07:00
Tony Brix
6869998638 set title to empty string 2018-04-17 13:27:18 -05:00
Tony Brix
5aed7249b1 remove () around pedantic title 2018-04-17 09:43:47 -05:00
Tony Brix
5bc83ea8a6 fix href < 2018-04-16 22:16:36 -05:00
Tony Brix
4b7cfbe8f2 remove unnecessary trim 2018-04-16 22:05:02 -05:00
Tony Brix
090debd9b4 move processing 2018-04-16 21:51:28 -05:00
Jamie Davis
5ab4ae3649 security: replace vulnerable regex with parser (#1223) 
* security: replace vulnerable regex with parser

Problem: link regex was vulnerable
Solution: dedicated parser

Fixes: #1222
 2018-04-16 20:21:12 -04:00
Jamie Davis
f052a2c04e security: fix unsafe heading regex 
Problem:
REDOS could be triggered through exploitation of the 'heading' regex.

Solution:
Refactor regex. It matches the same language as before but
is less vulnerable to REDOS.
It is now safe using the bounds suggested by those disclosing it.
It remains super-linear but a successful exploit requires
a much longer attack string.

Fixes:
Issue disclosed privately.

Credit:
This issue was pointed out by
Nick Starke and Adam Cazzolla of Sonatype Security research.
 2018-04-15 22:20:15 -04:00
Tony Brix
4e52c427c6 Merge branch 'master' into pr/1135 2018-04-10 10:10:29 -05:00
Tony Brix
17b231d484 return defaults 2018-04-10 08:28:40 -05:00