gitly icon indicating copy to clipboard operation
gitly copied to clipboard

feature: preventing XSS attacks in Markdown files

Open walkingdevel opened this issue 3 years ago • 0 comments

Feature for preventing XSS attacks and running malicious JavaScript code in Markdown files. Yep, it is parsing HTML via regular expressions, but it is a temporary solution. In the future, I'll implement it with the built-in library, when the markdown library will support escaping HTML tags via DOM parsing. Maybe, I will do it.

P.S: I use the PCRE library because the built-in library couldn't parse my expressions.


Before: source

After: dom

walkingdevel avatar Oct 01 '22 11:10 walkingdevel