Commit Graph

  • 6fbabb0ad0 Merge ffa7d0e058 into 728952b90a #501 Lucas Michot 2017-05-14 14:48:43 +0000
  • 1b4d659538 Merge 0b88d6ee1c into 728952b90a #502 Lucas Michot 2017-05-14 14:48:43 +0000
  • 728952b90a Merge pull request #499 from aidantwoods/fix/hhvm 1.6.3 Emanuil Rusev 2017-05-14 17:47:48 +0300
  • c82af01bd6
    add sudo false #499 Aidan Woods 2017-05-14 14:36:55 +0100
  • 67c3efbea0
    according to https://tools.ietf.org/html/rfc3986#section-3 the colon is a required part of the syntax, other methods of achieving the colon character (as to browser interpretation) should be taken care of by htmlencoding that is done on all attribute content #495 Aidan Woods 2017-05-09 19:37:13 +0100
  • 0b88d6ee1c Update .gitignore #502 Lucas Michot 2017-05-10 12:06:49 +0200
  • 58454a2e4e Ignore composer.lock and vendor Lucas Michot 2017-05-10 11:33:20 +0200
  • ffa7d0e058 Enforce PSR-2. #501 Lucas Michot 2017-05-10 11:30:14 +0200
  • 593ffd45a3 Merge pull request #406 from adrilo/patch-1 Emanuil Rusev 2017-05-10 12:28:53 +0300
  • 22e38a883c Merge 4b7b84bdfd into f76b10aaab #500 Lucas Michot 2017-05-10 09:24:04 +0000
  • 4b7b84bdfd Update .gitattributes #500 Lucas Michot 2017-05-10 11:24:01 +0200
  • da942d77ca Do not export tests folder Lucas Michot 2017-05-10 11:21:31 +0200
  • bbb7687f31
    safeMode will either apply all sanitisation techniques to an element or none (note that encoding HTML entities is done regardless because it speaks to character context, and that the only attributes/elements we should permit are the ones we actually mean to create) Aidan Woods 2017-05-09 19:31:36 +0100
  • b1e5aebaf6
    add single safeMode option that encompasses protection from link destination xss and plain markup based xss into a single on/off switch Aidan Woods 2017-05-09 19:22:58 +0100
  • c63b690a79
    remove duplicates Aidan Woods 2017-05-09 14:50:15 +0100
  • 226f636360
    remove $safe flag Aidan Woods 2017-05-07 13:45:59 +0100
  • 2e4afde68d
    faster check substr at beginning of string Aidan Woods 2017-05-05 21:55:58 +0100
  • c0453645a3 Merge d264130ab9 into f76b10aaab #303 Fredrick Brennan 2017-05-05 20:40:57 +0000
  • 60995e7664 Merge f93bc53f8f into f76b10aaab #309 Mladen Mijatov 2017-05-05 20:36:54 +0000
  • dc30cb441c
    add more protocols to the whitelist Aidan Woods 2017-05-05 21:32:27 +0100
  • f76b10aaab update readme Emanuil Rusev 2017-05-04 10:28:55 +0300
  • 054ba3c487
    urlencode urls that are potentially unsafe: Aidan Woods 2017-05-03 17:01:27 +0100
  • 4bae1c9834
    whitelist regex for good attribute (no no chars that could form a delimiter allowed Aidan Woods 2017-05-03 00:39:01 +0100
  • aee3963e6b
    jpeg, not jpg Aidan Woods 2017-05-02 19:55:03 +0100
  • 4dc98b635d
    whitelist changes: * add gif and jpg as allowed data images * ensure that user controlled content fall only in the "data section" of the data URI (and does not intersect content-type definition in any way (best to be safe than sorry ;-))) "data section" as defined in: https://tools.ietf.org/html/rfc2397#section-3 Aidan Woods 2017-05-02 19:48:08 +0100
  • e4bb12329e
    array_keys is probably faster Aidan Woods 2017-05-02 01:25:33 +0100
  • 6d0156d707
    dump attributes that contain characters that are impossible for validity, or very unlikely Aidan Woods 2017-05-02 00:30:04 +0100
  • 29ad172261 Merge pull request #496 from aidantwoods/fix/ditch-hhvm-nightly Emanuil Rusev 2017-05-01 19:35:36 +0300
  • 131ba75851
    filter onevent attributes Aidan Woods 2017-05-01 15:44:04 +0100
  • 924b26e16c replace hhvm nightly with nightly #496 Aidan Woods 2017-05-01 03:53:29 +0100
  • af04ac92e2
    add xss tests Aidan Woods 2017-05-01 03:33:49 +0100
  • 6bb66db00f
    anti-xss Aidan Woods 2017-05-01 03:24:40 +0100
  • b3d45c4bb9 Add html escaping to all attributes capable of holding user input. naNuke 2015-01-26 18:49:17 +0100
  • 1d4296f34d Customizable whitelist of schemas for safeLinks naNuke 2015-01-25 19:47:32 +0100
  • bf5105cb1a Improve safeLinks with whitelist. naNuke 2015-01-24 22:37:14 +0100
  • 1140613fc7 Prevent various XSS attacks naNuke 2015-01-21 03:50:36 +0100
  • 16d7ac6704 Merge 20d5d5d49e into 4367f89a74 #191 Graham Campbell 2017-04-16 01:17:23 +0000
  • 9b1cb533f5 Fixed README Caret link #491 Tony 2017-04-10 13:07:08 -0500
  • 55df6ec59c Merge 7b03a46c78 into 4367f89a74 #33 Haralan Dobrev 2017-03-30 07:47:58 +0000
  • c83f018ebe Merge ae5a171be1 into 4367f89a74 #49 Anh Nhan Nguyen 2017-03-30 07:47:58 +0000
  • 1d0af35f10
    update test to result generated by CommonMark reference parser Aidan Woods 2017-03-25 14:47:36 +0000
  • d7956e3ade
    blockmarkup ends on interrupt by newline (CommonMark compliance) Aidan Woods 2017-03-25 14:28:43 +0000
  • fd567abe45 Merge f529dc0760 into 4367f89a74 #441 Carsten Brandt 2017-03-29 17:18:28 +0000
  • 4367f89a74 attempt to fix failing builds on 5.3 Emanuil Rusev 2017-03-29 19:30:24 +0300
  • 1bf24f7334 add kbd to text-level elements 1.6.2 Emanuil Rusev 2017-03-29 19:04:15 +0300
  • 0a09d5ad45 update tests to reflect changes in phpunit 6.0 Emanuil Rusev 2017-03-23 20:21:05 +0200
  • 3fc442b078 Merge pull request #484 from hkdobrev/patch-1 Emanuil Rusev 2017-03-10 09:41:24 +0200
  • bd0e31a7dd Add Symfony demo to "Who uses it?" #484 Haralan Dobrev 2017-03-10 01:04:53 +0200
  • dfaf03639a Merge pull request #480 from pjona/patch-1 Emanuil Rusev 2017-03-08 23:21:03 +0200
  • 7081afe8cb Removed double semicolon #480 Marek Skiba 2017-03-02 12:43:51 +0100
  • 63c01d5057
    back to less lenient list start conditon – breaks less commonmark tests, but fails a few in native tests. Interesting... #467 Aidan Woods 2017-01-24 00:43:59 +0000
  • 49ae7f9925
    line indent from line whitespace after marker; more leneant on condition for indent match on list start (prevents test 243 breaking) Aidan Woods 2017-01-24 00:37:45 +0000
  • ab59a97161
    record code block indent Aidan Woods 2017-01-24 00:34:29 +0000
  • 69c3efb3f1
    avoid modifying data when testing whether a new block can be started Aidan Woods 2017-01-23 21:51:29 +0000
  • 0d89b672d0
    dont cause errors Aidan Woods 2017-01-23 17:08:43 +0000
  • fb3db195cb
    move block identifying code into own method; use this to check whether a new block exists on the current line at a lesser indentation: if so, interupt current block Aidan Woods 2017-01-23 16:05:12 +0000
  • ab9f45b420 Update the way parsedown deals with indentation Aidan Woods 2017-01-23 16:02:14 +0000
  • 4b6493999a Merge pull request #465 from aidantwoods/patch-8 Emanuil Rusev 2017-01-23 09:45:19 +0200
  • 0172d779d7 Trim surrounding whitespace from URL in inlineLink #465 Aidan Woods 2017-01-21 11:06:41 +0000
  • 6a21c86e69 Fix #463 #464 Aidan Woods 2017-01-18 18:05:06 +0000
  • cc5b38ca39 Merge pull request #459 from gene-sis/fix_inlineLink_regex Emanuil Rusev 2017-01-07 16:51:03 +0200
  • 48351504de adjust two regex pattern within inlineLink() to reduce backtracking add test with base64 image #459 gene_sis 2017-01-06 20:40:19 +0100
  • ccdb9a0bfa Add a function to read remote file #452 Frederick MC Chan 2016-12-08 10:58:07 +0800
  • fcc79f597d Merge 5e08edcffa into 20ff8bbb57 #334 Anthony Williams 2016-11-15 02:13:55 +0000
  • 20ff8bbb57 Merge pull request #447 from greut/phpunit-from-extra 1.6.1 Emanuil Rusev 2016-11-02 17:56:58 +0200
  • bc21988fe5
    Fix include from ParsedownTest #447 Yoan Blanc 2016-11-01 18:27:37 +0100
  • e1b30621a9 Added a workaround for a PHP bug caused by regex backtracking #444 Carsten Brandt 2016-10-31 15:18:08 +0100
  • e3c3e28554 Merge pull request #446 from jamesevickery/master Emanuil Rusev 2016-10-25 17:39:55 +0300
  • f053740132 Merge pull request #1 from erusev/master #446 James Vickery 2016-10-25 15:24:11 +0100
  • 7a92a31739 Grammar update James Vickery 2016-10-25 15:22:17 +0100
  • 6eca8796fb Merge pull request #445 from jamesevickery/master Emanuil Rusev 2016-10-25 17:21:57 +0300
  • 8876c0984e Tiny grammar correction #445 James Vickery 2016-10-25 15:10:22 +0100
  • b70633df79 added test file that crashes PHP Carsten Brandt 2016-10-20 10:03:34 +0200
  • 67e454e300 Merge pull request #2 from PhrozenByte/aidantwoods/patch-4 Aidan Woods 2016-10-14 08:29:11 +0100
  • 37f630fef9
    Update expect-to-pass CommonMark spec examples for f4e0234 #440 Daniel Rudolf 2016-10-13 22:32:56 +0200
  • 583dc0567d
    Add initial test/commonmark/ folder Daniel Rudolf 2016-10-13 22:31:52 +0200
  • 0728a8c433
    Sync phpunit data set and CommonMark spec example numbers Daniel Rudolf 2016-10-13 22:30:47 +0200
  • aae9b0367e
    Test Parsedown against cached expect-to-pass CommonMark spec examples Daniel Rudolf 2016-10-12 03:06:11 +0200
  • ae0211a84c
    Travis: Add PHP nightly Daniel Rudolf 2016-10-13 22:17:03 +0200
  • a9f696f7bb
    Improve CommonMark spec example regex Daniel Rudolf 2016-10-13 22:16:46 +0200
  • a3836b1853
    Handle subsequent list items which aren't indented sufficiently Daniel Rudolf 2016-10-13 20:44:02 +0200
  • a9e1163c85
    Fix code formatting Daniel Rudolf 2016-10-13 19:52:38 +0200
  • 7b1529fff0
    Use the list marker width to determine whether a list item is continued Daniel Rudolf 2016-10-13 19:51:32 +0200
  • 1d61f90bf9
    Support list items starting with indented code Daniel Rudolf 2016-10-13 19:47:06 +0200
  • 4b3b7df710
    Support list items starting with a blank line Daniel Rudolf 2016-10-13 19:46:29 +0200
  • 30ff5c6e75
    Remove unused $placeholder variable Daniel Rudolf 2016-10-13 19:31:35 +0200
  • bdf537e9d5
    Fix ordered list start argument Daniel Rudolf 2016-10-13 19:30:50 +0200
  • 81025cd468
    Revert "Break less previously passed CommonMarkWeak tests" Daniel Rudolf 2016-10-13 19:25:43 +0200
  • e691034861
    Revert "Prevent failure with data set 77 in CommonMarkWeak" Daniel Rudolf 2016-10-13 19:25:37 +0200
  • eb853da92a
    Revert "Prevent breaking remaining previously compliant CommonMarkWeak tests" Daniel Rudolf 2016-10-13 19:25:30 +0200
  • 6973302ca8 Prevent breaking remaining previously compliant CommonMarkWeak tests Aidan Woods 2016-10-13 15:55:13 +0100
  • 0a43799da4 Prevent failure with data set 77 in CommonMarkWeak Aidan Woods 2016-10-13 14:29:52 +0100
  • f529dc0760 Update .travis.yml #441 Carsten Brandt 2016-10-13 11:32:46 +0200
  • 2db3199510 Break less previously passed CommonMarkWeak tests Aidan Woods 2016-10-12 18:10:44 +0100
  • 2423644d72
    Move test/CommonMarkTest.php to test/CommonMarkTestStrict.php Daniel Rudolf 2016-10-12 02:01:40 +0200
  • 8965c7864f More appropriate tests for these changes Aidan Woods 2016-10-11 20:55:59 +0100
  • d26b33c20f Add ) as an ordered list marker Aidan Woods 2016-10-11 19:18:43 +0100
  • d9679141fa Update test to comply with CommonMark Aidan Woods 2016-10-11 13:50:47 +0100
  • 0bd61a73ed Check that the current line is a list before starting a new one Aidan Woods 2016-10-11 13:48:38 +0100
  • 06c4344a71 Contextual limits on indentation stripping Aidan Woods 2016-10-11 13:38:47 +0100