Commit Graph

22 Commits

Author SHA1 Message Date
lumburr
1e34b3de23 feat: add eslint:recommended check 2022-03-09 19:39:57 +08:00
Zongmin Lei
901b771960 style: reformat all source code by prettier 2021-05-06 13:32:47 +08:00
Tom Anthony
51de741f7b Update handling of quoteStart to prevent sanitization bypass using non-space whitespace. 2021-01-25 21:17:00 +01:00
Tom Anthony
379d181273 Make coding style project consistent. 2020-07-24 10:41:06 +01:00
Tom Anthony
f454fd76e6 Update handling of quoteStart to allow for whitespace after =. Add a new test case for this failure scenario. 2020-07-22 23:40:13 +01:00
Simon Bertrang
4c66d6e388 Update parser.js
Actually turn on strict mode.
2019-03-27 09:30:16 +01:00
Zongmin Lei
2b853a9d8d fix issue #122 use undefined variable currentHtml 2017-12-29 09:53:17 +08:00
Zongmin Lei
9b85b8f2d6 reformat by prettier 2017-12-21 14:22:34 +08:00
Zongmin Lei
32a4bece31 translate all comments to English 2017-12-21 14:19:10 +08:00
ztree
903769c37d passed test:
assert.equal(xss('<a\ttarget="_blank"\ntitle="bbb">'), '<a target="_blank" title="bbb">');
    assert.equal(xss('<a\ntarget="_blank"\ttitle="bbb">'), '<a target="_blank" title="bbb">');
    assert.equal(xss('<a\n\n\n\ttarget="_blank"\t\t\t\ntitle="bbb">'), '<a target="_blank" title="bbb">');
2017-08-31 16:41:44 +08:00
ztree
a3982311a9 HTML Tag 内的属性间隔支持 \t 2017-08-30 10:10:39 +08:00
zTree
b0fa6e9fc1 Update parser.js
对特殊 html 进行支持(例如 word 复制的 html 内容)

如果只通过 空格进行区分,就会出现以下问题:
```
<img width=100 height=200
src='....'/>
```

这种没有空格,只有换行的 html 转换后会变为

```
<img width="100" height="200 src=&quot;....&quot;“/>
```
2017-08-21 10:54:15 +08:00
Zongmin Lei
fb5891fa7c Fixed issue #40 start quote only when the previous char is = 2015-08-18 18:33:56 +08:00
chengbapi
df0b76992d Update parser.js
IE7中不支持string[index]的用法改用slice做兼容
2015-08-04 15:32:27 +08:00
Zongmin Lei
55924144c6 v0.2.5 2015-08-04 08:51:31 +08:00
Zongmin Lei
fb6364d431 Fixed issue #37 support unstrict HTML format: allow spaces between attribute name and attribute value 2015-08-02 21:20:36 +08:00
josephj
231458ea48 避免窜改 Array.prototype 2015-03-27 22:02:03 +11:00
Zongmin Lei
98dc24ab5a originPosition改名为sourcePosition 2014-02-13 16:33:35 +08:00
Zongmin Lei
c3912a5773 修正html parser 2014-02-13 14:58:05 +08:00
Zongmin Lei
ad057762a3 test: parseAttr 2014-02-13 10:26:17 +08:00
Zongmin Lei
1540118ac7 test: parseTag 2014-02-12 17:59:55 +08:00
Zongmin Lei
a5f23d9c68 简单 html parser (未完成) 2014-02-12 14:33:16 +08:00