1
0
mirror of https://github.com/erusev/parsedown.git synced 2023-08-10 21:13:06 +03:00

Commit Graph

  • 65d7bc5013 Special casing for elements with no name Aidan Woods 2018-03-18 22:36:30 +00:00
  • 1a47e74be1 Quotes are permitted in escaped body Aidan Woods 2018-03-18 22:33:26 +00:00
  • 56cc41803a Merge pull request #514 from Daniel-KM/fix/consistency_follow Aidan Woods 2018-03-25 19:53:21 +01:00
  • d86d839677 Merge branch 'master' into fix/consistency_follow Aidan Woods 2018-03-25 19:37:04 +01:00
  • ced6187ca5 Merge pull request #575 from cebe/patch-3 Aidan Woods 2018-03-20 16:33:53 +00:00
  • 972648ff64 Added inline example to README Carsten Brandt 2018-03-20 16:56:40 +01:00
  • 77dc0a090a Merge pull request #569 from aidantwoods/feature/unsafe-html Aidan Woods 2018-03-18 21:58:48 +00:00
  • 88dc949890 Refactor based on suggestion by @PhrozenByte Aidan Woods 2018-03-18 19:42:14 +00:00
  • 624a08b7eb Update commment Aidan Woods 2018-03-15 19:55:33 +00:00
  • 3fc54bc966 Allow extension to "vouch" for raw HTML they produce Rename "unsafeHtml" to "rawHtml" Aidan Woods 2018-03-15 19:46:03 +00:00
  • ef7ed7b66c Still grab the text if safe mode enabled, but output it escaped Aidan Woods 2018-03-15 11:09:55 +00:00
  • e4c5be026d Further attempt to dissuade this feature's use Aidan Woods 2018-03-15 11:00:03 +00:00
  • e6444bb57e Add unsafeHtml option for extensions to use on trusted input Aidan Woods 2018-03-15 10:42:29 +00:00
  • a3265e7c6f Merge pull request #511 from aidantwoods/feature/null-name-element Aidan Woods 2018-03-15 09:41:16 +00:00
  • aac00ac742 Merge pull request #566 from aidantwoods/fix/email-autolink Aidan Woods 2018-03-10 00:06:59 +00:00
  • 6830c3339f Readability Aidan Woods 2018-03-09 17:38:41 +00:00
  • 19f1bb9353 Disable backtracking where the regex doesn't need it Aidan Woods 2018-03-09 16:54:21 +00:00
  • 721b885dd3 Fix #565 by validating email as defined in commonmark spec Aidan Woods 2018-03-09 16:49:04 +00:00
  • f70d96479a Add test case for email surrounded by tags Aidan Woods 2018-03-09 16:48:32 +00:00
  • 92e9c27ba0 Merge pull request #563 from luizbills/master 1.7.1 Aidan Woods 2018-03-08 01:11:30 +00:00
  • 9857334186 bump version Luiz Paulo "Bills 2018-03-07 22:04:55 -03:00
  • ae7e8e5067 bump version Luiz Paulo "Bills 2018-03-07 21:51:35 -03:00
  • 253822057a refactor who uses it section in readme a bit more Emanuil Rusev 2018-03-02 17:46:45 +02:00
  • a18bf495ed refactor who uses it section in readme Emanuil Rusev 2018-03-02 17:40:21 +02:00
  • e5bf9560d7 add Laravel to who uses it Emanuil Rusev 2018-03-02 17:37:16 +02:00
  • 33b51eaefa Fix typo Aidan Woods 2018-03-02 01:13:58 +00:00
  • d686a50292 Merge pull request #557 from aidantwoods/documentation/safe-mode Aidan Woods 2018-03-01 19:59:44 +00:00
  • f3068df45a Remove extra line breaks Aidan Woods 2018-03-01 19:54:58 +00:00
  • 9b1f54b9d3 Lets be consistent with hyphenation Aidan Woods 2018-03-01 18:45:38 +00:00
  • 90439ef882 Rewrite section Aidan Woods 2018-03-01 18:44:11 +00:00
  • 72d30d33bc allow element to have no name Aidan Woods 2017-06-13 20:28:32 +01:00
  • 97dd037e6f Merge pull request #561 from PhrozenByte/patch-3 Aidan Woods 2018-02-28 23:47:01 +00:00
  • fa89f0d743 Add mbstring dependency to composer.json Daniel Rudolf 2018-02-28 20:42:25 +01:00
  • d638fd8a25 Merge pull request #560 from PhrozenByte/patch-2 Aidan Woods 2018-02-28 19:09:57 +00:00
  • cc53d5ae29 Travis: Issue build error when Parsedown::version isn't up-to-date Daniel Rudolf 2018-02-28 19:12:19 +01:00
  • 45f40696f6 Merge pull request #559 from PhrozenByte/patch-1 Aidan Woods 2018-02-28 18:07:37 +00:00
  • e8f3d4efc0 Merge pull request #558 from harikt/issue-232 Aidan Woods 2018-02-28 18:02:14 +00:00
  • 096e164756 Update README.md Daniel Rudolf 2018-02-28 18:59:34 +01:00
  • e2f3961f80 Add test case to make sure issue 232 no longer exists Hari KT 2018-02-28 23:25:38 +05:30
  • e941dcc3f0 Merge pull request #525 from aidantwoods/fix/infostring Aidan Woods 2018-02-28 17:06:25 +00:00
  • c192001a7e Merge pull request #433 from aidantwoods/patch-3 Aidan Woods 2018-02-28 17:05:58 +00:00
  • 48a053fe29 Merge pull request #423 from PhrozenByte/bugfix/CommonMarkTest Aidan Woods 2018-02-28 17:05:24 +00:00
  • 5057e505d8 Merge pull request #475 from aidantwoods/loose-lists Aidan Woods 2018-02-28 17:05:00 +00:00
  • ad62bf5a6f Talk about safe mode in the README Aidan Woods 2018-02-28 17:01:31 +00:00
  • 6678d59be4 Merge pull request #495 from aidantwoods/anti-xss 1.7.0 Emanuil Rusev 2018-02-28 13:41:37 +02:00
  • c999a4b61b improve readme Emanuil Rusev 2018-01-29 20:55:30 +02:00
  • e938ab4ffe improve readme Emanuil Rusev 2018-01-29 20:54:40 +02:00
  • e69374af0d improve readme Emanuil Rusev 2018-01-29 20:52:27 +02:00
  • 722b776684 Test multiple multiline lists Aidan Woods 2018-01-29 14:25:00 +01:00
  • 7fd92a8fbd update tests Aidan Woods 2017-02-19 16:19:55 +00:00
  • 0e1043a8d6 consistent li items for loose list Aidan Woods 2017-02-19 16:12:04 +00:00
  • 1196ed9512 Merge pull request #548 from m1guelpf-forks/patch-1 Emanuil Rusev 2018-01-01 18:48:54 +02:00
  • 1244122b84 Update LICENSE.txt Miguel Piedrafita 2018-01-01 14:09:31 +01:00
  • d98d60aaf3 Update license year Miguel Piedrafita 2017-12-31 22:10:48 +01:00
  • 296ebf0e60 Merge pull request #429 from pablotheissen/patch-1 Emanuil Rusev 2017-11-19 11:15:43 +02:00
  • a60ba300b1 Merge pull request #540 from jbafford/patch-1 Emanuil Rusev 2017-11-15 10:31:22 +02:00
  • 089789dfff Fix typo in README John Bafford 2017-11-14 17:13:31 -05:00
  • 03e1a6ac02 Merge branch 'master' into bugfix/CommonMarkTest Daniel Rudolf 2017-11-14 22:09:25 +01:00
  • fbe3fe878f Merge pull request #539 from gabriel-caruso/phpunit 1.6.4 Emanuil Rusev 2017-11-14 22:44:03 +02:00
  • 09827f542c Rewrite Travis CI Gabriel Caruso 2017-11-14 15:19:24 -02:00
  • 70ef6f5521 Make Travis CI use installed PHPUnit version, not global one Gabriel Caruso 2017-11-11 01:02:11 -02:00
  • 691e36b1f2 Use PHPUnit\Framework\TestCase instead of PHPUnit_Framework_TestCase Gabriel Caruso 2017-11-11 00:56:03 -02:00
  • af6affdc2c improve readme Emanuil Rusev 2017-11-06 16:54:00 +02:00
  • 9cf41f27ab improve readme Emanuil Rusev 2017-10-22 16:01:34 +03:00
  • 16aadff2ed improve readme Emanuil Rusev 2017-10-22 16:00:43 +03:00
  • 07c937583d improve readme Emanuil Rusev 2017-10-22 15:57:58 +03:00
  • 4404201175 Properly support fenced code block infostring Aidan Woods 2017-08-20 10:28:46 +01:00
  • c05ef0c12a Merge branch 'aidantwoods-htmlblocks' into fix/consistency_follow Daniel Berthereau 2017-06-23 00:00:00 +02:00
  • 47e4163a68 Merge branch 'htmlblocks' of https://github.com/aidantwoods/parsedown into aidantwoods-htmlblocks Daniel Berthereau 2017-06-23 00:00:00 +02:00
  • c05bff047a correct test to match CommonMark specified input for output Aidan Woods 2017-06-22 00:03:12 +01:00
  • 6a4afac0d0 remove ability for htmlblock to allow paragraph after if it closes on the same line Aidan Woods 2017-06-22 00:02:03 +01:00
  • 129f807e32 Inverted checks of consistency for markdown following markups. Daniel Berthereau 2017-06-22 00:00:00 +02:00
  • be963a6531 Added tests for consistency when a markdown follows a markup without blank line. Daniel Berthereau 2017-06-19 00:00:00 +02:00
  • 728952b90a Merge pull request #499 from aidantwoods/fix/hhvm 1.6.3 Emanuil Rusev 2017-05-14 17:47:48 +03:00
  • c82af01bd6 add sudo false Aidan Woods 2017-05-14 14:36:55 +01:00
  • 67c3efbea0 according to https://tools.ietf.org/html/rfc3986#section-3 the colon is a required part of the syntax, other methods of achieving the colon character (as to browser interpretation) should be taken care of by htmlencoding that is done on all attribute content Aidan Woods 2017-05-09 19:37:13 +01:00
  • 593ffd45a3 Merge pull request #406 from adrilo/patch-1 Emanuil Rusev 2017-05-10 12:28:53 +03:00
  • bbb7687f31 safeMode will either apply all sanitisation techniques to an element or none (note that encoding HTML entities is done regardless because it speaks to character context, and that the only attributes/elements we should permit are the ones we actually mean to create) Aidan Woods 2017-05-09 19:31:36 +01:00
  • b1e5aebaf6 add single safeMode option that encompasses protection from link destination xss and plain markup based xss into a single on/off switch Aidan Woods 2017-05-09 19:22:58 +01:00
  • c63b690a79 remove duplicates Aidan Woods 2017-05-09 14:50:15 +01:00
  • 226f636360 remove $safe flag Aidan Woods 2017-05-07 13:45:59 +01:00
  • 2e4afde68d faster check substr at beginning of string Aidan Woods 2017-05-05 21:55:58 +01:00
  • dc30cb441c add more protocols to the whitelist Aidan Woods 2017-05-05 21:32:27 +01:00
  • f76b10aaab update readme Emanuil Rusev 2017-05-04 10:28:55 +03:00
  • 054ba3c487 urlencode urls that are potentially unsafe: Aidan Woods 2017-05-03 17:01:27 +01:00
  • 4bae1c9834 whitelist regex for good attribute (no no chars that could form a delimiter allowed Aidan Woods 2017-05-03 00:39:01 +01:00
  • aee3963e6b jpeg, not jpg Aidan Woods 2017-05-02 19:55:03 +01:00
  • 4dc98b635d whitelist changes: * add gif and jpg as allowed data images * ensure that user controlled content fall only in the "data section" of the data URI (and does not intersect content-type definition in any way (best to be safe than sorry ;-))) "data section" as defined in: https://tools.ietf.org/html/rfc2397#section-3 Aidan Woods 2017-05-02 19:48:08 +01:00
  • e4bb12329e array_keys is probably faster Aidan Woods 2017-05-02 01:25:33 +01:00
  • 6d0156d707 dump attributes that contain characters that are impossible for validity, or very unlikely Aidan Woods 2017-05-02 00:30:04 +01:00
  • 29ad172261 Merge pull request #496 from aidantwoods/fix/ditch-hhvm-nightly Emanuil Rusev 2017-05-01 19:35:36 +03:00
  • 131ba75851 filter onevent attributes Aidan Woods 2017-05-01 15:44:04 +01:00
  • 924b26e16c replace hhvm nightly with nightly Aidan Woods 2017-05-01 03:53:29 +01:00
  • af04ac92e2 add xss tests Aidan Woods 2017-05-01 03:33:49 +01:00
  • 6bb66db00f anti-xss Aidan Woods 2017-05-01 03:24:40 +01:00
  • b3d45c4bb9 Add html escaping to all attributes capable of holding user input. naNuke 2015-01-26 18:49:17 +01:00
  • 1d4296f34d Customizable whitelist of schemas for safeLinks naNuke 2015-01-25 19:47:32 +01:00
  • bf5105cb1a Improve safeLinks with whitelist. naNuke 2015-01-24 22:37:14 +01:00
  • 1140613fc7 Prevent various XSS attacks naNuke 2015-01-21 03:50:36 +01:00
  • 1d0af35f10 update test to result generated by CommonMark reference parser Aidan Woods 2017-03-25 14:47:36 +00:00