Преглед изворни кода

마크다운 HTML 필터 추가

잉여개발기 (SPDV) пре 2 година
родитељ
комит
d8707991d8

BIN
route_go/bin/main.amd64.bin


BIN
route_go/bin/main.amd64.exe


BIN
route_go/bin/main.arm64.bin


BIN
route_go/bin/main.arm64.exe


+ 3 - 1
route_go/route/tool/markdown.go

@@ -3,13 +3,15 @@ package tool
 import (
 	"database/sql"
 
+	"github.com/microcosm-cc/bluemonday"
 	"github.com/russross/blackfriday/v2"
 )
 
 func Markdown(db *sql.DB, db_set map[string]string, data map[string]string) map[string]interface{} {
 	input := []byte(data["data"])
 
-	html := blackfriday.Run(input)
+	unsafe := blackfriday.Run(input)
+	html := bluemonday.UGCPolicy().SanitizeBytes(unsafe)
 
 	end_data := make(map[string]interface{})
 	end_data["data"] = string(html)

+ 1 - 1
version.json

@@ -1,6 +1,6 @@
 {
     "beta" : {
-        "r_ver" : "v3.5.0-dev54",
+        "r_ver" : "v3.5.0-dev55",
         "c_ver" : "3500376",
         "s_ver" : "3500113"
     }