Skip to content

Commit 904d4b4

Browse files
committed
Fix conflict
2 parents cd9afbb + 517fe37 commit 904d4b4

File tree

2 files changed

+19
-0
lines changed

2 files changed

+19
-0
lines changed

.github/CHANGELOG.md

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -95,6 +95,18 @@
9595
- Document can't be exported when inline formulas are in other blocks than paragraph (#1522)
9696
- Wrong task-list item alignment (#1540)
9797

98+
## 0.15.1
99+
100+
v0.15.1 is an unplanned release to fix a XSS security vulnerability.
101+
102+
**:beetle:Bug fix**
103+
104+
- **Fixed a XSS security vulnerability when parsing inline HTML (#1390)**
105+
- Fixed portable mode detection if current working directory don't match the application directory (#1382)
106+
- Fixed exception in main process due to file watcher (#1284)
107+
- Added emoji fallback fonts for macOS and Windows too (#1299)
108+
- Fixed RegEx for recommend title (#1128)
109+
98110
## 0.15.0
99111

100112
**:warning:Breaking Changes:**

src/muya/lib/parser/render/renderInlines/htmlTag.js

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,10 @@
1+
import createDOMPurify from 'dompurify'
12
import { CLASS_OR_ID, BLOCK_TYPE6 } from '../../../config'
23
import { snakeToCamel } from '../../../utils'
34
import sanitize from '../../../utils/dompurify'
45

6+
const { sanitize } = createDOMPurify(window)
7+
58
export default function htmlTag (h, cursor, block, token, outerClass) {
69
const { tag, openTag, closeTag, children, attrs } = token
710
const className = children ? this.getClassName(outerClass, block, token, cursor) : CLASS_OR_ID.AG_GRAY
@@ -39,7 +42,11 @@ export default function htmlTag (h, cursor, block, token, outerClass) {
3942
// we also recommand user not use block level element in paragraph. use block element in html block.
4043
// Use code !sanitize(`<${tag}>`) to filter some malicious tags. for example: <embed>.
4144
let selector = BLOCK_TYPE6.includes(tag) || !sanitize(`<${tag}>`) ? 'span' : tag
45+
<<<<<<< HEAD
4246
selector += `.${CLASS_OR_ID.AG_INLINE_RULE}.${CLASS_OR_ID.AG_RAW_HTML}`
47+
=======
48+
selector += `.${CLASS_OR_ID.AG_INLINE_RULE}`
49+
>>>>>>> master
4350
const data = {
4451
attrs: {},
4552
dataset: {

0 commit comments

Comments
 (0)