mirror of
https://github.com/TryGhost/Ghost.git
synced 2024-12-04 04:10:33 +03:00
d40f545106
closes #3387 - added placeholder for <script> and <iframe> - added google-caja sanitizer - changed title in posts overview to ‚double-stash‘
21 lines
814 B
JavaScript
21 lines
814 B
JavaScript
/* global Showdown, Handlebars, html_sanitize*/
|
|
import cajaSanitizers from 'ghost/utils/caja-sanitizers';
|
|
|
|
var showdown = new Showdown.converter({extensions: ['ghostimagepreview', 'ghostgfm']});
|
|
|
|
var formatMarkdown = Ember.Handlebars.makeBoundHelper(function (markdown) {
|
|
var html = '';
|
|
|
|
// replace script and iFrame
|
|
markdown = markdown.replace(/<script\b[^<]*(?:(?!<\/script>)<[^<]*)*<\/script>/gi, '```\nEmbedded JavaScript\n```');
|
|
markdown = markdown.replace(/<iframe\b[^<]*(?:(?!<\/iframe>)<[^<]*)*<\/iframe>/gi, '```\nEmbedded IFrame\n```');
|
|
|
|
// convert markdown to HTML
|
|
html = showdown.makeHtml(markdown || '');
|
|
|
|
// sanitize html
|
|
html = html_sanitize(html, cajaSanitizers.url, cajaSanitizers.id);
|
|
return new Handlebars.SafeString(html);
|
|
});
|
|
|
|
export default formatMarkdown; |