You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
forgejo/modules/markup
zeripath 172229966c
Prevent panic on fuzzer provided string (#14405)
* Prevent panic on fuzzer provided string

The fuzzer has found that providing a <body> tag with an attribute to
PostProcess causes a panic. This PR removes any rendered html or body
tags from the output.

Signed-off-by: Andrew Thornton <art27@cantab.net>

* Placate lint

* placate lint again

Signed-off-by: Andrew Thornton <art27@cantab.net>

* minor cleanup

Signed-off-by: Andrew Thornton <art27@cantab.net>
3 years ago
..
common Don't replace underscores in auto-generated IDs in goldmark (#12805) 4 years ago
csv Detect delimiter in CSV rendering (#7869) 5 years ago
external Re-attempt to delete temporary upload if the file is locked by another process (#12447) 4 years ago
markdown Markdown task list improvements (#13952) 4 years ago
mdstripper Detect full references to issues and pulls in commit messages (#12399) 4 years ago
orgmode fix: media links in org files not liked to media files (#12997) 4 years ago
html.go Prevent panic on fuzzer provided string (#14405) 3 years ago
html_internal_test.go Issue/PR Context Popups (#9822) 5 years ago
html_test.go Prevent panic on fuzzer provided string (#14405) 3 years ago
markup.go Don't manually replace whitespace during render (#10291) 4 years ago
markup_test.go Prioritize "readme.md" (#5691) 6 years ago
sanitizer.go Markdown task list improvements (#13952) 4 years ago
sanitizer_test.go Markdown task list improvements (#13952) 4 years ago