archive-gh-me/nodeclub
1
0
Fork 0
mirror of https://github.com/cnodejs/nodeclub.git synced 2026-02-01 16:34:28 +00:00
Code Issues Projects Releases Wiki Activity

fix xss

Browse Source
This commit is contained in:
alsotang 2014-09-21 20:53:25 +08:00
parent e9a4b31083
commit d4ae63cb59
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
common/render_helpers.js
View File

@ -13,14 +13,16 @@
var marked = require('marked');
var _ = require('lodash');
var config = require('../config');
var validator = require('validator');
// Set default options
var renderer = new marked.Renderer();
renderer.code = function (code, lang) {
var language = lang && (' language-' + lang) || '';
return '<pre class="prettyprint' + language + '">'
+ '<code>' + code.replace(/</g, '&lt;').replace(/>/g, '&gt;') + '</code>'
var language = lang && ('language-' + lang) || '';
language = validator.escape(language);
return '<pre class="prettyprint ' + language + '">'
+ '<code>' + validator.escape(code) + '</code>'
+ '</pre>';
};