Compare commits
1 Commits
main
...
feat/use-g
| Author | SHA1 | Date | |
|---|---|---|---|
| 277ca8be24 |
@@ -13,7 +13,6 @@ A lightweight, pure Perl markdown to HTML converter that uses a state machine fo
|
|||||||
## Requirements
|
## Requirements
|
||||||
|
|
||||||
- Perl 5.42 or higher
|
- Perl 5.42 or higher
|
||||||
- Getopt::Long (but it's already installed on most Perl installations)
|
|
||||||
|
|
||||||
## Installation
|
## Installation
|
||||||
|
|
||||||
|
|||||||
@@ -288,8 +288,8 @@ sub parse_inline {
|
|||||||
push @bold_parts, { type => 'bold', content => $1 };
|
push @bold_parts, { type => 'bold', content => $1 };
|
||||||
return "\x01B$idx\x02";
|
return "\x01B$idx\x02";
|
||||||
}->()/ge;
|
}->()/ge;
|
||||||
$text =~ s/(?<!\w)___((?:[^_]|_(?!_))+?)___(?!\w)/<strong>$1<\/strong>/g;
|
$text =~ s/___((?:[^_]|_(?!_))+?)___/<strong>$1<\/strong>/g;
|
||||||
$text =~ s/(?<!\w)__((?:[^_]|_(?!_))+?)__(?!\w)/<strong>$1<\/strong>/g;
|
$text =~ s/__((?:[^_]|_(?!_))+?)__/<strong>$1<\/strong>/g;
|
||||||
|
|
||||||
my @italic_parts;
|
my @italic_parts;
|
||||||
my $italic_idx = 0;
|
my $italic_idx = 0;
|
||||||
@@ -298,7 +298,7 @@ sub parse_inline {
|
|||||||
push @italic_parts, { type => 'italic', content => $1 };
|
push @italic_parts, { type => 'italic', content => $1 };
|
||||||
return "\x01I$idx\x02";
|
return "\x01I$idx\x02";
|
||||||
}->()/ge;
|
}->()/ge;
|
||||||
$text =~ s/(?<!\w)_((?:[^_]|_(?!_))+?)_(?!\w)/sub {
|
$text =~ s/_([^_]+)_/sub {
|
||||||
my $idx = $italic_idx++;
|
my $idx = $italic_idx++;
|
||||||
push @italic_parts, { type => 'italic', content => $1 };
|
push @italic_parts, { type => 'italic', content => $1 };
|
||||||
return "\x01I$idx\x02";
|
return "\x01I$idx\x02";
|
||||||
@@ -312,7 +312,7 @@ sub parse_inline {
|
|||||||
push @italic_parts, { type => 'italic', content => $1 };
|
push @italic_parts, { type => 'italic', content => $1 };
|
||||||
return "\x01I$idx\x02";
|
return "\x01I$idx\x02";
|
||||||
}->()/ge;
|
}->()/ge;
|
||||||
$content =~ s/(?<!\w)_((?:[^_]|_(?!_))+?)_(?!\w)/sub {
|
$content =~ s/_([^_]+)_/sub {
|
||||||
my $idx = $italic_idx++;
|
my $idx = $italic_idx++;
|
||||||
push @italic_parts, { type => 'italic', content => $1 };
|
push @italic_parts, { type => 'italic', content => $1 };
|
||||||
return "\x01I$idx\x02";
|
return "\x01I$idx\x02";
|
||||||
@@ -379,22 +379,10 @@ s/\x01F$i\x02/<$part->{tag}>@{[escape_html($part->{content})]}<\/$part->{tag}>/;
|
|||||||
|
|
||||||
sub is_safe_url {
|
sub is_safe_url {
|
||||||
my ($url) = @_;
|
my ($url) = @_;
|
||||||
my $normalized = $url // '';
|
return 0 if $url =~ /^\s*javascript:/i;
|
||||||
|
return 0 if $url =~ /^\s*data:/i;
|
||||||
$normalized =~ s/^\s+//;
|
return 0 if $url =~ /^\s*vbscript:/i;
|
||||||
$normalized =~ s/\s+$//;
|
return 0 if $url =~ /^\s*file:/i;
|
||||||
$normalized =~ s/%([0-9A-Fa-f]{2})/chr(hex($1))/eg
|
|
||||||
while $normalized =~ /%[0-9A-Fa-f]{2}/;
|
|
||||||
$normalized =~ s/&#x([0-9A-Fa-f]+);?/chr(hex($1))/eg;
|
|
||||||
$normalized =~ s/&#(\d+);?/chr($1)/eg;
|
|
||||||
|
|
||||||
if ( $normalized =~ /^([a-z][a-z0-9+\-.]*):/i ) {
|
|
||||||
my $scheme = lc $1;
|
|
||||||
return 1
|
|
||||||
if $scheme eq 'http' || $scheme eq 'https' || $scheme eq 'mailto';
|
|
||||||
return 0;
|
|
||||||
}
|
|
||||||
|
|
||||||
return 1;
|
return 1;
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -409,3 +397,4 @@ sub escape_html {
|
|||||||
}
|
}
|
||||||
|
|
||||||
1;
|
1;
|
||||||
|
|
||||||
|
|||||||
6
m2h.pl
6
m2h.pl
@@ -2,7 +2,6 @@
|
|||||||
use strict;
|
use strict;
|
||||||
use Getopt::Long;
|
use Getopt::Long;
|
||||||
use MarkdownParser;
|
use MarkdownParser;
|
||||||
use open qw(:std :encoding(UTF-8));
|
|
||||||
|
|
||||||
sub show_help {
|
sub show_help {
|
||||||
print <<"EOF";
|
print <<"EOF";
|
||||||
@@ -31,7 +30,6 @@ sub read_input {
|
|||||||
if ($file) {
|
if ($file) {
|
||||||
open my $fh, '<', $file
|
open my $fh, '<', $file
|
||||||
or die "Error: Cannot open file: $file\n";
|
or die "Error: Cannot open file: $file\n";
|
||||||
binmode $fh, ':encoding(UTF-8)';
|
|
||||||
my $content = <$fh>;
|
my $content = <$fh>;
|
||||||
close $fh;
|
close $fh;
|
||||||
return $content;
|
return $content;
|
||||||
@@ -54,16 +52,12 @@ show_version() if $version;
|
|||||||
|
|
||||||
my $input_file = shift @ARGV;
|
my $input_file = shift @ARGV;
|
||||||
|
|
||||||
binmode STDIN, ':encoding(UTF-8)';
|
|
||||||
binmode STDOUT, ':encoding(UTF-8)';
|
|
||||||
|
|
||||||
my $input = read_input($input_file);
|
my $input = read_input($input_file);
|
||||||
|
|
||||||
my $output;
|
my $output;
|
||||||
if ($output_file) {
|
if ($output_file) {
|
||||||
open $output, '>', $output_file
|
open $output, '>', $output_file
|
||||||
or die "Error: Cannot write to file: $output_file\n";
|
or die "Error: Cannot write to file: $output_file\n";
|
||||||
binmode $output, ':encoding(UTF-8)';
|
|
||||||
}
|
}
|
||||||
else {
|
else {
|
||||||
$output = \*STDOUT;
|
$output = \*STDOUT;
|
||||||
|
|||||||
@@ -2,7 +2,7 @@
|
|||||||
use strict;
|
use strict;
|
||||||
use warnings;
|
use warnings;
|
||||||
|
|
||||||
use Test::More tests => 13;
|
use Test::More tests => 11;
|
||||||
use MarkdownParser;
|
use MarkdownParser;
|
||||||
|
|
||||||
my $parser = MarkdownParser->new();
|
my $parser = MarkdownParser->new();
|
||||||
@@ -62,7 +62,4 @@ is(
|
|||||||
"<p><strong>bold text</strong></p>\n",
|
"<p><strong>bold text</strong></p>\n",
|
||||||
"Bold with ___"
|
"Bold with ___"
|
||||||
);
|
);
|
||||||
is( $parser->parse("my_variable"),
|
|
||||||
"<p>my_variable</p>\n", "Underscore inside word unchanged" );
|
|
||||||
is( $parser->parse("CONST__VALUE"),
|
|
||||||
"<p>CONST__VALUE</p>\n", "Double underscores inside word unchanged" );
|
|
||||||
|
|||||||
@@ -2,7 +2,7 @@
|
|||||||
use strict;
|
use strict;
|
||||||
use warnings;
|
use warnings;
|
||||||
|
|
||||||
use Test::More tests => 10;
|
use Test::More tests => 8;
|
||||||
use MarkdownParser;
|
use MarkdownParser;
|
||||||
|
|
||||||
my $parser = MarkdownParser->new();
|
my $parser = MarkdownParser->new();
|
||||||
@@ -37,14 +37,8 @@ is(
|
|||||||
"<p>Click me</p>\n",
|
"<p>Click me</p>\n",
|
||||||
"Data protocol blocked in links"
|
"Data protocol blocked in links"
|
||||||
);
|
);
|
||||||
is(
|
|
||||||
$parser->parse("[Click me](javascript:alert('XSS'))"),
|
|
||||||
"<p>Click me</p>\n",
|
|
||||||
"Encoded JavaScript protocol blocked in links"
|
|
||||||
);
|
|
||||||
is( $parser->parse(")"),
|
is( $parser->parse(")"),
|
||||||
"<p>Image</p>\n", "JavaScript protocol blocked in images" );
|
"<p>Image</p>\n", "JavaScript protocol blocked in images" );
|
||||||
is( $parser->parse(""),
|
is( $parser->parse(""),
|
||||||
"<p>Image</p>\n", "File protocol blocked in images" );
|
"<p>Image</p>\n", "File protocol blocked in images" );
|
||||||
is( $parser->parse(")"),
|
|
||||||
"<p>Image</p>\n", "Encoded JavaScript protocol blocked in images" );
|
|
||||||
|
|||||||
Reference in New Issue
Block a user