Compare commits
1 Commits
main
...
feat/use-g
| Author | SHA1 | Date | |
|---|---|---|---|
| 277ca8be24 |
@@ -13,7 +13,6 @@ A lightweight, pure Perl markdown to HTML converter that uses a state machine fo
|
||||
## Requirements
|
||||
|
||||
- Perl 5.42 or higher
|
||||
- Getopt::Long (but it's already installed on most Perl installations)
|
||||
|
||||
## Installation
|
||||
|
||||
|
||||
@@ -288,8 +288,8 @@ sub parse_inline {
|
||||
push @bold_parts, { type => 'bold', content => $1 };
|
||||
return "\x01B$idx\x02";
|
||||
}->()/ge;
|
||||
$text =~ s/(?<!\w)___((?:[^_]|_(?!_))+?)___(?!\w)/<strong>$1<\/strong>/g;
|
||||
$text =~ s/(?<!\w)__((?:[^_]|_(?!_))+?)__(?!\w)/<strong>$1<\/strong>/g;
|
||||
$text =~ s/___((?:[^_]|_(?!_))+?)___/<strong>$1<\/strong>/g;
|
||||
$text =~ s/__((?:[^_]|_(?!_))+?)__/<strong>$1<\/strong>/g;
|
||||
|
||||
my @italic_parts;
|
||||
my $italic_idx = 0;
|
||||
@@ -298,7 +298,7 @@ sub parse_inline {
|
||||
push @italic_parts, { type => 'italic', content => $1 };
|
||||
return "\x01I$idx\x02";
|
||||
}->()/ge;
|
||||
$text =~ s/(?<!\w)_((?:[^_]|_(?!_))+?)_(?!\w)/sub {
|
||||
$text =~ s/_([^_]+)_/sub {
|
||||
my $idx = $italic_idx++;
|
||||
push @italic_parts, { type => 'italic', content => $1 };
|
||||
return "\x01I$idx\x02";
|
||||
@@ -312,7 +312,7 @@ sub parse_inline {
|
||||
push @italic_parts, { type => 'italic', content => $1 };
|
||||
return "\x01I$idx\x02";
|
||||
}->()/ge;
|
||||
$content =~ s/(?<!\w)_((?:[^_]|_(?!_))+?)_(?!\w)/sub {
|
||||
$content =~ s/_([^_]+)_/sub {
|
||||
my $idx = $italic_idx++;
|
||||
push @italic_parts, { type => 'italic', content => $1 };
|
||||
return "\x01I$idx\x02";
|
||||
@@ -379,22 +379,10 @@ s/\x01F$i\x02/<$part->{tag}>@{[escape_html($part->{content})]}<\/$part->{tag}>/;
|
||||
|
||||
sub is_safe_url {
|
||||
my ($url) = @_;
|
||||
my $normalized = $url // '';
|
||||
|
||||
$normalized =~ s/^\s+//;
|
||||
$normalized =~ s/\s+$//;
|
||||
$normalized =~ s/%([0-9A-Fa-f]{2})/chr(hex($1))/eg
|
||||
while $normalized =~ /%[0-9A-Fa-f]{2}/;
|
||||
$normalized =~ s/&#x([0-9A-Fa-f]+);?/chr(hex($1))/eg;
|
||||
$normalized =~ s/&#(\d+);?/chr($1)/eg;
|
||||
|
||||
if ( $normalized =~ /^([a-z][a-z0-9+\-.]*):/i ) {
|
||||
my $scheme = lc $1;
|
||||
return 1
|
||||
if $scheme eq 'http' || $scheme eq 'https' || $scheme eq 'mailto';
|
||||
return 0;
|
||||
}
|
||||
|
||||
return 0 if $url =~ /^\s*javascript:/i;
|
||||
return 0 if $url =~ /^\s*data:/i;
|
||||
return 0 if $url =~ /^\s*vbscript:/i;
|
||||
return 0 if $url =~ /^\s*file:/i;
|
||||
return 1;
|
||||
}
|
||||
|
||||
@@ -409,3 +397,4 @@ sub escape_html {
|
||||
}
|
||||
|
||||
1;
|
||||
|
||||
|
||||
6
m2h.pl
6
m2h.pl
@@ -2,7 +2,6 @@
|
||||
use strict;
|
||||
use Getopt::Long;
|
||||
use MarkdownParser;
|
||||
use open qw(:std :encoding(UTF-8));
|
||||
|
||||
sub show_help {
|
||||
print <<"EOF";
|
||||
@@ -31,7 +30,6 @@ sub read_input {
|
||||
if ($file) {
|
||||
open my $fh, '<', $file
|
||||
or die "Error: Cannot open file: $file\n";
|
||||
binmode $fh, ':encoding(UTF-8)';
|
||||
my $content = <$fh>;
|
||||
close $fh;
|
||||
return $content;
|
||||
@@ -54,16 +52,12 @@ show_version() if $version;
|
||||
|
||||
my $input_file = shift @ARGV;
|
||||
|
||||
binmode STDIN, ':encoding(UTF-8)';
|
||||
binmode STDOUT, ':encoding(UTF-8)';
|
||||
|
||||
my $input = read_input($input_file);
|
||||
|
||||
my $output;
|
||||
if ($output_file) {
|
||||
open $output, '>', $output_file
|
||||
or die "Error: Cannot write to file: $output_file\n";
|
||||
binmode $output, ':encoding(UTF-8)';
|
||||
}
|
||||
else {
|
||||
$output = \*STDOUT;
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
use strict;
|
||||
use warnings;
|
||||
|
||||
use Test::More tests => 13;
|
||||
use Test::More tests => 11;
|
||||
use MarkdownParser;
|
||||
|
||||
my $parser = MarkdownParser->new();
|
||||
@@ -62,7 +62,4 @@ is(
|
||||
"<p><strong>bold text</strong></p>\n",
|
||||
"Bold with ___"
|
||||
);
|
||||
is( $parser->parse("my_variable"),
|
||||
"<p>my_variable</p>\n", "Underscore inside word unchanged" );
|
||||
is( $parser->parse("CONST__VALUE"),
|
||||
"<p>CONST__VALUE</p>\n", "Double underscores inside word unchanged" );
|
||||
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
use strict;
|
||||
use warnings;
|
||||
|
||||
use Test::More tests => 10;
|
||||
use Test::More tests => 8;
|
||||
use MarkdownParser;
|
||||
|
||||
my $parser = MarkdownParser->new();
|
||||
@@ -37,14 +37,8 @@ is(
|
||||
"<p>Click me</p>\n",
|
||||
"Data protocol blocked in links"
|
||||
);
|
||||
is(
|
||||
$parser->parse("[Click me](javascript:alert('XSS'))"),
|
||||
"<p>Click me</p>\n",
|
||||
"Encoded JavaScript protocol blocked in links"
|
||||
);
|
||||
is( $parser->parse(")"),
|
||||
"<p>Image</p>\n", "JavaScript protocol blocked in images" );
|
||||
is( $parser->parse(""),
|
||||
"<p>Image</p>\n", "File protocol blocked in images" );
|
||||
is( $parser->parse(")"),
|
||||
"<p>Image</p>\n", "Encoded JavaScript protocol blocked in images" );
|
||||
|
||||
|
||||
Reference in New Issue
Block a user