gitea/modules/markup
6543 fb274ec54b
Prevent panic on fuzzer provided string (#14405) (#14409)
* Prevent panic on fuzzer provided string

The fuzzer has found that providing a <body> tag with an attribute to
PostProcess causes a panic. This PR removes any rendered html or body
tags from the output.

Signed-off-by: Andrew Thornton <art27@cantab.net>

* Placate lint

* placate lint again

Signed-off-by: Andrew Thornton <art27@cantab.net>

* minor cleanup

Signed-off-by: Andrew Thornton <art27@cantab.net>

Co-authored-by: zeripath <art27@cantab.net>
2021-01-20 20:47:30 +02:00
..
common
csv
external
markdown
mdstripper
orgmode fix: media links in org files not liked to media files (#12997) 2020-10-01 11:22:34 -04:00
html.go Prevent panic on fuzzer provided string (#14405) (#14409) 2021-01-20 20:47:30 +02:00
html_internal_test.go
html_test.go Prevent panic on fuzzer provided string (#14405) (#14409) 2021-01-20 20:47:30 +02:00
markup.go
markup_test.go
sanitizer.go
sanitizer_test.go