mirror of
https://gitee.com/vnotex/vnote.git
synced 2025-07-05 05:49:53 +08:00
29 lines
1.9 KiB
JavaScript
29 lines
1.9 KiB
JavaScript
(function(f){if(typeof exports==="object"&&typeof module!=="undefined"){module.exports=f()}else if(typeof define==="function"&&define.amd){define([],f)}else{var g;if(typeof window!=="undefined"){g=window}else if(typeof global!=="undefined"){g=global}else if(typeof self!=="undefined"){g=self}else{g=this}g.markdownItXSS = f()}})(function(){var define,module,exports;return (function e(t,n,r){function s(o,u){if(!n[o]){if(!t[o]){var a=typeof require=="function"&&require;if(!u&&a)return a(o,!0);if(i)return i(o,!0);var f=new Error("Cannot find module '"+o+"'");throw f.code="MODULE_NOT_FOUND",f}var l=n[o]={exports:{}};t[o][0].call(l.exports,function(e){var n=t[o][1][e];return s(n?n:e)},l,l.exports,e,t,n,r)}return n[o].exports}var i=typeof require=="function"&&require;for(var o=0;o<r.length;o++)s(r[o]);return s})({1:[function(require,module,exports){
|
|
'use strict';
|
|
|
|
module.exports = function protect_xss(md, opts = {}) {
|
|
const proxy = (tokens, idx, options, env, self) => self.renderToken(tokens, idx, options);
|
|
const defaultHtmlInlineRenderer = md.renderer.rules.html_inline || proxy;
|
|
const defaultHtmlBlockRenderer = md.renderer.rules.html_block || proxy;
|
|
opts.whiteList = {...window.filterXSS.getDefaultWhiteList(), ...opts.whiteList};
|
|
// Do not escape value when it is a tag and attr in the whitelist.
|
|
opts.safeAttrValue = (tag, name, value, cssFilter) => { return value; }
|
|
|
|
function protectFromXSS(html) {
|
|
return filterXSS(html, opts);
|
|
}
|
|
|
|
function filterContent(tokens, idx, options, env, slf, fallback) {
|
|
tokens[idx].content = protectFromXSS(tokens[idx].content);
|
|
return fallback(tokens, idx, options, env, slf);
|
|
}
|
|
|
|
md.renderer.rules.html_inline = (tokens, idx, options, env, slf) =>
|
|
filterContent(tokens, idx, options, env, slf, defaultHtmlInlineRenderer);
|
|
md.renderer.rules.html_block = (tokens, idx, options, env, slf) =>
|
|
filterContent(tokens, idx, options, env, slf, defaultHtmlBlockRenderer);
|
|
};
|
|
|
|
},{}]},{},[1])(1)
|
|
});
|