cyber-mawonaj/web-core-fr-gp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Support HTML links with rel attr in ApplyBasicAccessibleMarkdown

Browse Source 
Ref T874 T744
This commit is contained in:
Matt Baer
2022-01-18 16:27:28 -05:00
parent 3e1dcd609c
commit 0da0bcaf01
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
posts/render.go
+5 -2
View File
@@ -64,7 +64,7 @@ func ApplyBasicMarkdown(data []byte) string {
} }
// ApplyBasicAccessibleMarkdown applies Markdown to the given data, rendering basic text formatting and preserving hard // ApplyBasicAccessibleMarkdown applies Markdown to the given data, rendering basic text formatting and preserving hard
// line breaks. It is meant for formatting text in small, multi-line UI elements, like user profile biographies. // line breaks in HTML. It is meant for formatting text in small, multi-line UI elements, like user profile biographies.
func ApplyBasicAccessibleMarkdown(data []byte) string { func ApplyBasicAccessibleMarkdown(data []byte) string {
mdExtensions := 0 | mdExtensions := 0 |
blackfriday.EXTENSION_STRIKETHROUGH | blackfriday.EXTENSION_STRIKETHROUGH |
@@ -72,8 +72,8 @@ func ApplyBasicAccessibleMarkdown(data []byte) string {
blackfriday.EXTENSION_HEADER_IDS | blackfriday.EXTENSION_HEADER_IDS |
blackfriday.EXTENSION_HARD_LINE_BREAK blackfriday.EXTENSION_HARD_LINE_BREAK
htmlFlags := 0 | htmlFlags := 0 |
blackfriday.HTML_SKIP_HTML |
blackfriday.HTML_USE_SMARTYPANTS | blackfriday.HTML_USE_SMARTYPANTS |
blackfriday.HTML_USE_XHTML |
blackfriday.HTML_SMARTYPANTS_DASHES blackfriday.HTML_SMARTYPANTS_DASHES
// Generate Markdown // Generate Markdown
@@ -81,7 +81,10 @@ func ApplyBasicAccessibleMarkdown(data []byte) string {
// Strip out bad HTML // Strip out bad HTML
policy := bluemonday.UGCPolicy() policy := bluemonday.UGCPolicy()
policy.AllowAttrs("class", "id").Globally() policy.AllowAttrs("class", "id").Globally()
policy.AllowAttrs("rel").OnElements("a")
policy.RequireNoFollowOnLinks(false)
outHTML := string(policy.SanitizeBytes(md)) outHTML := string(policy.SanitizeBytes(md))
// Strip surrounding <p> tags that blackfriday adds
outHTML = markeddownReg.ReplaceAllString(outHTML, "$1") outHTML = markeddownReg.ReplaceAllString(outHTML, "$1")
outHTML = strings.TrimRightFunc(outHTML, unicode.IsSpace) outHTML = strings.TrimRightFunc(outHTML, unicode.IsSpace)