FoundKeyGang/FoundKey
FoundKeyGang/FoundKey
7
19
Fork 22
Code Issues 37 Pull requests 4 Releases Activity

clean up markdown parsing

Browse source
This commit is contained in:
Johann150 2023-02-12 16:34:07 +01:00
parent 5fe51d063c
commit 95aa73c614
Signed by: Johann150
GPG key ID: 9EE6577A2A06F8F1
1 changed files with 6 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
packages/client/src/scripts/markdown.ts
View file

@ -101,7 +101,10 @@ marked.use({
level: 'inline',
start(src) { return src.indexOf('$['); },
tokenizer(src) {
/* ABNF of the regex below, the regex matches the <mfm-fn> rule
/*
* ABNF of the regex below, the regex matches the <mfm-fn> rule
* SECURITY: neither argument key nor value must contain any "HTML dangerous" characters
name = 1*(ALPHA / DIGIT / "_") ; one or more "word" characters, Ecmascripts \w
argument = <name> ["=" <name>] ; arguments are key = value pairs
@ -124,7 +127,6 @@ marked.use({
.split(',')
// split argument name and value
.map((arg) => {
console.log("mfm arg", arg);
if (arg.includes('=')) {
// split once at first equal sign
const equalsIdx = arg.indexOf('=');
@ -152,8 +154,10 @@ marked.use({
const argsAttrs = Object.entries(token.args)
.reduce((acc, [key, value]) => {
if (value == null) {
// SECURITY: key does not need to be escaped because only "word" characters will be matched in the tokenizer
return acc + ` data-mfm-${key}`;
} else {
// SECURITY: key and value do not need to be escaped because only "word" characters will be matched in the tokenizer
return acc + ` data-mfm-${key}="${value}"`;
}
}, '');