]> git.maquefel.me Git - brevno-suite/hugo/commit
projects / brevno-suite / hugo / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 81a5cdc) | patch
Fix potential content XSS by escaping dangerous URLs in links and images
authorBjørn Erik Pedersen <bjorn.erik.pedersen@gmail.com>
Wed, 1 Apr 2026 11:54:10 +0000 (13:54 +0200)
committerBjørn Erik Pedersen <bjorn.erik.pedersen@gmail.com>
Wed, 1 Apr 2026 12:23:24 +0000 (14:23 +0200)
commit479fe6c654937a850b65e74551dc4e857d52898f
tree790a7f8bcec99aea319bd4f4e4dd545ebdabc201tree | snapshot
parent81a5cdca0788ca39574a17d444c9db29d0b19e27commit | diff
Fix potential content XSS by escaping dangerous URLs in links and images

* This issue in question was fixed upstream in https://github.com/yuin/goldmark/releases/tag/v1.8.2
* We do, however, have a copy of the affected functions, used as fallbacks when no render hook are defined for e.g. links and images, so we need to port these fixes to our copy of the affected functions.
markup/goldmark/goldmark_integration_test.go diff | blob | history
markup/goldmark/render_hooks.go diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.