IntenseWebs/discourse
3
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-02-16 18:24:52 -06:00
Code Issues Packages Projects Releases Wiki Activity

SECURITY: Malformed URL could crash V8

Browse Source
This commit is contained in:
Robin Ward 2014-09-12 13:19:15 -04:00
parent 2c6d03f87f
commit 1e880fd5e1
1 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
vendor/assets/javascripts/better_markdown.js vendored
View File

@ -1349,11 +1349,13 @@
return [ consumed, link ];
}
m = text.match(new RegExp("^\\((" + urlRegexp + ")\\)"));
if (m && m[1]) {
consumed += m[0].length;
link = ["link", {href: m[1]}].concat(children);
return [consumed, link];
if (text.indexOf('(') === 0 && text.indexOf(')') !== -1) {
m = text.match(new RegExp("^\\((" + urlRegexp + ")\\)"));
if (m && m[1]) {
consumed += m[0].length;
link = ["link", {href: m[1]}].concat(children);
return [consumed, link];
}
}
// [Alt text][id]