Files
discourse/lib
Martin Brennan fa6b87a1bf SECURITY: Strip unrendered unicode bidirectional chars in code blocks (#15032)
When rendering the markdown code blocks we replace the
offending characters in the output string with spans highlighting a textual
representation of the character, along with a title attribute with
information about why the character was highlighted.

The list of characters stripped by this fix, which are the bidirectional
characters considered relevant, are:

U+202A
U+202B
U+202C
U+202D
U+202E
U+2066
U+2067
U+2068
U+2069
2021-11-22 10:43:03 +10:00
..
2021-10-27 11:39:28 +03:00
2020-01-15 11:27:12 +01:00
2021-10-27 11:39:28 +03:00
2021-08-10 18:30:34 +04:00
2021-05-31 10:22:50 +08:00
2019-05-22 17:39:44 +03:00
2020-05-05 13:46:57 +10:00
2021-06-21 11:06:58 +08:00
2020-07-21 15:55:03 +08:00
2020-04-30 16:48:53 +10:00