mirror of
https://github.com/go-gitea/gitea
synced 2024-08-19 22:00:48 +02:00
add regexp to restrict <code class=""></code>
This commit is contained in:
parent
357c002c03
commit
e4d4662074
@ -15,6 +15,7 @@ import (
|
||||
"hash"
|
||||
"html/template"
|
||||
"math"
|
||||
"regexp"
|
||||
"strings"
|
||||
"time"
|
||||
|
||||
@ -26,11 +27,8 @@ import (
|
||||
"github.com/gogits/gogs/modules/setting"
|
||||
)
|
||||
|
||||
var Sanitizer = bluemonday.UGCPolicy()
|
||||
var Sanitizer = bluemonday.UGCPolicy().AllowAttrs("class").Matching(regexp.MustCompile(`[\p{L}\p{N}\s\-_',:\[\]!\./\\\(\)&]*`)).OnElements("code")
|
||||
|
||||
func init() {
|
||||
Sanitizer.AllowAttrs("class").OnElements("code")
|
||||
}
|
||||
|
||||
// Encode string to md5 hex value.
|
||||
func EncodeMd5(str string) string {
|
||||
|
Loading…
Reference in New Issue
Block a user