|
|
@@ -3,13 +3,15 @@ package tool
|
|
|
import (
|
|
|
"database/sql"
|
|
|
|
|
|
+ "github.com/microcosm-cc/bluemonday"
|
|
|
"github.com/russross/blackfriday/v2"
|
|
|
)
|
|
|
|
|
|
func Markdown(db *sql.DB, db_set map[string]string, data map[string]string) map[string]interface{} {
|
|
|
input := []byte(data["data"])
|
|
|
|
|
|
- html := blackfriday.Run(input)
|
|
|
+ unsafe := blackfriday.Run(input)
|
|
|
+ html := bluemonday.UGCPolicy().SanitizeBytes(unsafe)
|
|
|
|
|
|
end_data := make(map[string]interface{})
|
|
|
end_data["data"] = string(html)
|