Merge pull request #925 from annando/markdown-escape

Markdown: Escape some elements prior to sending them through Markdown
pull/928/head
Hypolite Petovan 2019-12-27 12:13:06 -05:00 committed by GitHub
commit d18af9c2c4
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 20 additions and 0 deletions

View File

@ -49,5 +49,25 @@ function markdown_post_local_start(App $a, &$request) {
return;
}
$request['body'] = Markdown::toBBCode($request['body']);
// Elements that shouldn't be parsed
$elements = ['code', 'noparse', 'nobb', 'pre'];
foreach ($elements as $element) {
$request['body'] = preg_replace_callback("/\[" . $element . "\](.*?)\[\/" . $element . "\]/ism",
function ($match) use ($element) {
return '[base64' . $element . ']' . base64_encode($match[1]) . '[/base64' . $element . ']';
},
$request['body']
);
}
$request['body'] = Markdown::toBBCode($request['body']);
foreach (array_reverse($elements) as $element) {
$request['body'] = preg_replace_callback("/\[base64" . $element . "\](.*?)\[\/base64" . $element . "\]/ism",
function ($match) use ($element) {
return '[' . $element . ']' . base64_decode($match[1]) . '[/' . $element . ']';
},
$request['body']
);
}
}