- 13 May, 2024 1 commit
-
-
Ethan authored
* Update render.js # Improved handling of mustache expressions and v-pre attribute assignment ## Changes Made: - Ensured that the parent tag of such text nodes is explicitly set to a `<p>` tag with the `v-pre` attribute. - Added debug messages for better understanding of the script execution flow [THIS SHOULD REMOVED WHEN PUSHING TO PRODUCTION]. ## Why it Works: - When a mustache expression is found, the script either wraps it in a new `<p>` tag with the `v-pre` attribute or adds the `v-pre` attribute to the existing parent `<p>` tag. - This approach ensures that the template code is not removed but encapsulated within `<p>` tags with the `v-pre` attribute, as required. ## Test Cases Passed: 1. `<xyz>{{ constructor.constructor('alert(1)')() }}</xyz>` 2. `<xyz>{{ constructor.constructor('alert(1)')() }}</xyz>` 3. `<p><xyz>{{ constructor.constructor('alert(1)')() }}</p>` 4. `<p><xyz>{{ constructor.constructor('alert(1)')() }}</xyz></p>` 5. `<p><xyz>{{constructor.constructor('alert("Test Case 8")')()}}<xyz>{{constructor.constructor('alert("Test Case 9")')()}}</xyz></p>` This commit enhances the robustness and reliability of handling mustache expressions and ensures proper assignment of the `v-pre` attribute, to ensure that there is no room for the weaponization of the template code later in the rendering process. * fix: move template expressions after dom-purify + handle text nodes without parent --------- Co-authored-by:
NGPixel <github@ngpixel.com>
-
- 23 Jan, 2024 1 commit
-
-
Jasmine Tai authored
-
- 25 Sep, 2023 1 commit
-
-
Pablo authored
-
- 28 Jul, 2023 1 commit
-
-
Jaeseo Park authored
* feat: markdown-it-pivot-table * chore: upgrade dependency version * style: remove semicolon in renderer.js --------- Co-authored-by:
Nicolas Giard <github@ngpixel.com>
-
- 24 Dec, 2022 1 commit
-
-
Boris authored
* feat: add asciidoc editor module * fix storage file extension for asciidoc pages * fix: asciidoc editor + rendering improvements * fix: description list css improvements Co-authored-by:
NGPixel <github@ngpixel.com>
-
- 13 Nov, 2022 1 commit
-
-
cannorin authored
Co-authored-by:
cannorin <cannorin@users.noreply.github.com>
-
- 09 Nov, 2022 1 commit
-
-
NGPixel authored
-
- 03 Apr, 2022 1 commit
-
-
NGPixel authored
-
- 12 Feb, 2022 1 commit
-
-
NGPixel authored
-
- 09 Oct, 2021 1 commit
-
-
broxen authored
* Removing superfluous div wrapping It seems like standalone text is already wrapped in paragraph elements, so this code seems superfluous. Additionally, it adds div wrappers at every line break as described in #4524 * Fix for newlines and returns This change skips newlines and returns to focus on unbounded text only. * misc: fix indentation * misc: fix indentation (2) Co-authored-by:
Nicolas Giard <github@ngpixel.com>
-
- 02 Oct, 2021 1 commit
-
-
broxen authored
Fix the issue described in discussion #3502 regarding header links and TOC failing to properly generate when header ID is custom defined.
-
- 12 Apr, 2021 1 commit
-
-
LK HO authored
-
- 26 Mar, 2021 1 commit
-
-
NGPixel authored
-
- 12 Mar, 2021 1 commit
-
-
NGPixel authored
-
- 01 Nov, 2020 1 commit
-
-
Chris authored
Fix spelling of "superscript" ***NO_CI***
-
- 26 Oct, 2020 1 commit
-
-
Nicolas Giard authored
-
- 14 Oct, 2020 1 commit
-
-
Jafar Akhondali authored
+ Remove duplicated await + Replace some legacy codes with ES6 + Fix some of eslint problems
-
- 13 Sep, 2020 1 commit
-
-
Иван authored
* fix: secure html module removes allowfullscreen, allow and frameborder attributes from iframes * Apply suggestions from code review fix: remove deprecated attributes for iframe in secure html module Co-authored-by:
Nicolas Giard <github@ngpixel.com>
-
- 12 Sep, 2020 1 commit
-
-
NGPixel authored
-
- 12 Jul, 2020 1 commit
-
-
NGPixel authored
-
- 03 Jul, 2020 1 commit
-
-
Regev Brody authored
-
- 19 Jun, 2020 1 commit
-
-
NGPixel authored
-
- 18 Jun, 2020 2 commits
-
-
Regev Brody authored
* feat: Caching kroki svgs #2020
-
Regev Brody authored
* fix: no markdown support for underline #2072
-
- 14 Jun, 2020 1 commit
-
-
Nicolas Giard authored
-
- 07 Jun, 2020 1 commit
-
-
Regev Brody authored
-
- 21 May, 2020 1 commit
-
-
NGPixel authored
-
- 17 May, 2020 1 commit
-
-
Robert Lanyi authored
* feat: Kroki integration see https://kroki.io/ * fix: markdown-kroki def updates Co-authored-by:
Nicolas Giard <github@ngpixel.com>
-
- 11 May, 2020 1 commit
-
-
NGPixel authored
-
- 09 May, 2020 1 commit
-
-
NGPixel authored
-
- 08 May, 2020 2 commits
- 07 May, 2020 1 commit
-
-
daneallen authored
* #1853: XSS attack fix by adding rel noferrer or rel noopen to _blank target external links * fix: relAttributeExternalLink noopener Co-authored-by:
danallendds <daniel.allen@friends.dds.mil> Co-authored-by:
Nicolas Giard <github@ngpixel.com>
-
- 02 May, 2020 1 commit
-
-
NGPixel authored
-
- 30 Apr, 2020 1 commit
-
-
NGPixel authored
-
- 27 Apr, 2020 2 commits
- 18 Apr, 2020 1 commit
-
-
NGPixel authored
-
- 17 Apr, 2020 2 commits