You've already forked AstralRinth
forked from didirus/AstralRinth
Fix wrong func being parsed, md parser (#1169)
This commit is contained in:
@@ -19,6 +19,11 @@ export const configuredXss = new xss.FilterXSS({
|
||||
area: [...xss.whiteList.a, 'coords'],
|
||||
a: [...xss.whiteList.a, 'rel'],
|
||||
},
|
||||
css: {
|
||||
whiteList: {
|
||||
'image-rendering': /^pixelated$/,
|
||||
},
|
||||
},
|
||||
onIgnoreTagAttr: (tag, name, value) => {
|
||||
// Allow iframes from acceptable sources
|
||||
if (tag === 'iframe' && name === 'src') {
|
||||
@@ -53,7 +58,7 @@ export const configuredXss = new xss.FilterXSS({
|
||||
return name + '="' + xss.escapeAttrValue(value) + '"'
|
||||
}
|
||||
},
|
||||
safeAttrValue(tag, name, value, _cssFilter) {
|
||||
safeAttrValue(tag, name, value, cssFilter) {
|
||||
if (tag === 'img' && name === 'src' && !value.startsWith('data:')) {
|
||||
try {
|
||||
const url = new URL(value)
|
||||
@@ -75,12 +80,17 @@ export const configuredXss = new xss.FilterXSS({
|
||||
]
|
||||
|
||||
if (!allowedHostnames.includes(url.hostname)) {
|
||||
return `https://wsrv.nl/?url=${encodeURIComponent(value)}&n=-1`
|
||||
return xss.safeAttrValue(
|
||||
tag,
|
||||
name,
|
||||
`https://wsrv.nl/?url=${encodeURIComponent(value)}&n=-1`,
|
||||
cssFilter
|
||||
)
|
||||
}
|
||||
} catch (err) {}
|
||||
}
|
||||
|
||||
return value
|
||||
return xss.safeAttrValue(tag, name, value, cssFilter)
|
||||
},
|
||||
})
|
||||
|
||||
|
||||
@@ -297,7 +297,9 @@
|
||||
<nuxt-link to="/legal/terms"> Terms</nuxt-link>
|
||||
<nuxt-link to="/legal/privacy"> Privacy</nuxt-link>
|
||||
<nuxt-link to="/legal/rules"> Rules</nuxt-link>
|
||||
<a :target="$external()" href="https://careers.modrinth.com"> Careers </a>
|
||||
<a :target="$external()" href="https://careers.modrinth.com"
|
||||
>Careers <span class="count-bubble">1</span></a
|
||||
>
|
||||
</div>
|
||||
<div class="links links-2" role="region" aria-label="Resources">
|
||||
<h4 aria-hidden="true">Resources</h4>
|
||||
@@ -1041,7 +1043,7 @@ export default defineNuxtComponent({
|
||||
border-radius: 5rem;
|
||||
background: var(--color-brand);
|
||||
color: var(--color-text-inverted);
|
||||
padding: 0 0.25rem;
|
||||
padding: 0 0.35rem;
|
||||
margin-left: 0.25rem;
|
||||
}
|
||||
}
|
||||
|
||||
@@ -173,8 +173,6 @@ export default defineNuxtConfig({
|
||||
},
|
||||
runtimeConfig: {
|
||||
apiBaseUrl: process.env.BASE_URL ?? getApiUrl(),
|
||||
ariadneBaseUrl: process.env.ARIADNE_URL ?? getAriadneUrl(),
|
||||
ariadneAdminKey: process.env.ARIADNE_ADMIN_KEY,
|
||||
rateLimitKey: process.env.RATE_LIMIT_IGNORE_KEY,
|
||||
public: {
|
||||
apiBaseUrl: getApiUrl(),
|
||||
|
||||
Reference in New Issue
Block a user