Bommels05/Modrinth
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Copy Knossos parser changes to Omorphia (#76)

Browse Source
This commit is contained in:
Brady 2023-06-28 13:13:25 -02:30 committed by GitHub
parent 33f3479569
commit dd205e849c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 12 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
lib/helpers/parse.js
View File

@ -14,14 +14,17 @@ export const configuredXss = new xss.FilterXSS({
kbd: ['id'],
input: ['checked', 'disabled', 'type'],
iframe: ['width', 'height', 'allowfullscreen', 'frameborder', 'start', 'end'],
img: [...xss.whiteList.img, 'usemap'],
img: [...xss.whiteList.img, 'usemap', 'style'],
map: ['name'],
area: [...xss.whiteList.a, 'coords'],
a: [...xss.whiteList.a, 'rel'],
td: [...xss.whiteList.td, 'style'],
th: [...xss.whiteList.th, 'style'],
},
css: {
whiteList: {
'image-rendering': /^pixelated$/,
'text-align': /^center|left|right$/,
},
},
onIgnoreTagAttr: (tag, name, value) => {
@ -50,12 +53,14 @@ export const configuredXss = new xss.FilterXSS({
}
// For Highlight.JS
if (
name === 'class' &&
['pre', 'code', 'span'].includes(tag) &&
(value.startsWith('hljs-') || value.startsWith('language-'))
) {
return name + '="' + xss.escapeAttrValue(value) + '"'
if (name === 'class' && ['pre', 'code', 'span'].includes(tag)) {
const allowedClasses = []
for (const className of value.split(/\s/g)) {
if (className.startsWith('hljs-') || className.startsWith('language-')) {
allowedClasses.push(className)
}
}
return name + '="' + xss.escapeAttrValue(allowedClasses.join(' ')) + '"'
}
},
safeAttrValue(tag, name, value, cssFilter) {