From 5a4a9b570eba05017532aef2b10c2840923a2731 Mon Sep 17 00:00:00 2001
From: Emma Alexia <emma@modrinth.com>
Date: Sat, 27 Jan 2024 12:35:04 -0500
Subject: [PATCH] Fix discrepancy in Markdown rendering (#1595)

---
 README.md                              |   2 +-
 components/ui/ModalConfirm.vue         |   2 +-
 components/ui/NotificationItem.vue     |   2 +-
 components/ui/thread/ThreadMessage.vue |   2 +-
 helpers/highlight.js                   |   2 +-
 helpers/parse.js                       | 148 -------------------------
 pages/[type]/[id].vue                  |   2 +-
 7 files changed, 6 insertions(+), 154 deletions(-)
 delete mode 100644 helpers/parse.js

diff --git a/README.md b/README.md
index e8f75d4f3..cc5e92de8 100644
--- a/README.md
+++ b/README.md
@@ -2,6 +2,6 @@
 
 ## Modrinth's center for its frontend service
 
-For contributing information, please see the knossos section of the [Modrinth contributing guide](https://docs.modrinth.com/docs/details/contributing/#knossos-frontend).
+For contributing information, please see the knossos section of the [Modrinth contributing guide](https://support.modrinth.com/en/articles/8802215-contributing-to-modrinth#h_1bc6570903).
 
 For a detailed explanation on how things work in general, check out the [Nuxt.js docs](https://nuxt.com).
diff --git a/components/ui/ModalConfirm.vue b/components/ui/ModalConfirm.vue
index e796c9d25..8aeb07c8a 100644
--- a/components/ui/ModalConfirm.vue
+++ b/components/ui/ModalConfirm.vue
@@ -34,10 +34,10 @@
 </template>
 
 <script>
+import { renderString } from 'omorphia'
 import CrossIcon from '~/assets/images/utils/x.svg'
 import TrashIcon from '~/assets/images/utils/trash.svg'
 import Modal from '~/components/ui/Modal.vue'
-import { renderString } from '~/helpers/parse.js'
 
 export default {
   components: {
diff --git a/components/ui/NotificationItem.vue b/components/ui/NotificationItem.vue
index 0d842f686..293125a64 100644
--- a/components/ui/NotificationItem.vue
+++ b/components/ui/NotificationItem.vue
@@ -288,6 +288,7 @@
 </template>
 
 <script setup>
+import { renderString } from 'omorphia'
 import InvitationIcon from '~/assets/images/utils/user-plus.svg'
 import ModerationIcon from '~/assets/images/sidebar/admin.svg'
 import NotificationIcon from '~/assets/images/sidebar/notifications.svg'
@@ -302,7 +303,6 @@ import { getProjectLink, getVersionLink } from '~/helpers/projects.js'
 import { getUserLink } from '~/helpers/users.js'
 import { acceptTeamInvite, removeSelfFromTeam } from '~/helpers/teams.js'
 import { markAsRead } from '~/helpers/notifications.js'
-import { renderString } from '~/helpers/parse.js'
 import DoubleIcon from '~/components/ui/DoubleIcon.vue'
 import Avatar from '~/components/ui/Avatar.vue'
 import Badge from '~/components/ui/Badge.vue'
diff --git a/components/ui/thread/ThreadMessage.vue b/components/ui/thread/ThreadMessage.vue
index 514c64dc7..85b615c0f 100644
--- a/components/ui/thread/ThreadMessage.vue
+++ b/components/ui/thread/ThreadMessage.vue
@@ -108,10 +108,10 @@ import {
   LockIcon,
   ModrinthIcon,
   ScaleIcon,
+  renderString,
 } from 'omorphia'
 import Avatar from '~/components/ui/Avatar.vue'
 import Badge from '~/components/ui/Badge.vue'
-import { renderString } from '~/helpers/parse.js'
 import { isStaff } from '~/helpers/users.js'
 
 const props = defineProps({
diff --git a/helpers/highlight.js b/helpers/highlight.js
index 3a3933949..688a226c2 100644
--- a/helpers/highlight.js
+++ b/helpers/highlight.js
@@ -15,7 +15,7 @@ import ini from 'highlight.js/lib/languages/ini'
 import yaml from 'highlight.js/lib/languages/yaml'
 import xml from 'highlight.js/lib/languages/xml'
 import properties from 'highlight.js/lib/languages/properties'
-import { md, configuredXss } from '~/helpers/parse.js'
+import { md, configuredXss } from 'omorphia'
 
 /* REGISTRATION */
 // Scripting
diff --git a/helpers/parse.js b/helpers/parse.js
deleted file mode 100644
index e3ee265c8..000000000
--- a/helpers/parse.js
+++ /dev/null
@@ -1,148 +0,0 @@
-import MarkdownIt from 'markdown-it'
-import xss from 'xss'
-
-export const configuredXss = new xss.FilterXSS({
-  whiteList: {
-    ...xss.whiteList,
-    summary: [],
-    h1: ['id'],
-    h2: ['id'],
-    h3: ['id'],
-    h4: ['id'],
-    h5: ['id'],
-    h6: ['id'],
-    kbd: ['id'],
-    input: ['checked', 'disabled', 'type'],
-    iframe: ['width', 'height', 'allowfullscreen', 'frameborder', 'start', 'end'],
-    img: [...xss.whiteList.img, 'usemap', 'style'],
-    map: ['name'],
-    area: [...xss.whiteList.a, 'coords'],
-    a: [...xss.whiteList.a, 'rel'],
-    td: [...xss.whiteList.td, 'style'],
-    th: [...xss.whiteList.th, 'style'],
-  },
-  css: {
-    whiteList: {
-      'image-rendering': /^pixelated$/,
-      'text-align': /^center|left|right$/,
-      float: /^left|right$/,
-    },
-  },
-  onIgnoreTagAttr: (tag, name, value) => {
-    // Allow iframes from acceptable sources
-    if (tag === 'iframe' && name === 'src') {
-      const allowedSources = [
-        {
-          regex:
-            /^https?:\/\/(www\.)?youtube(-nocookie)?\.com\/embed\/[a-zA-Z0-9_-]{11}(\?&autoplay=[0-1]{1})?$/,
-          remove: ['&autoplay=1'], // Prevents autoplay
-        },
-        {
-          regex: /^https?:\/\/(www\.)?discord\.com\/widget\?id=\d{18,19}(&theme=\w+)?$/,
-          remove: [/&theme=\w+/],
-        },
-      ]
-
-      for (const source of allowedSources) {
-        if (source.regex.test(value)) {
-          for (const remove of source.remove) {
-            value = value.replace(remove, '')
-          }
-          return name + '="' + xss.escapeAttrValue(value) + '"'
-        }
-      }
-    }
-
-    // For Highlight.JS
-    if (name === 'class' && ['pre', 'code', 'span'].includes(tag)) {
-      const allowedClasses = []
-      for (const className of value.split(/\s/g)) {
-        if (className.startsWith('hljs-') || className.startsWith('language-')) {
-          allowedClasses.push(className)
-        }
-      }
-      return name + '="' + xss.escapeAttrValue(allowedClasses.join(' ')) + '"'
-    }
-  },
-  safeAttrValue(tag, name, value, cssFilter) {
-    if (tag === 'img' && name === 'src' && !value.startsWith('data:')) {
-      try {
-        const url = new URL(value)
-
-        if (url.hostname.includes('wsrv.nl')) {
-          url.searchParams.delete('errorredirect')
-        }
-
-        const allowedHostnames = [
-          'imgur.com',
-          'i.imgur.com',
-          'cdn-raw.modrinth.com',
-          'cdn.modrinth.com',
-          'staging-cdn-raw.modrinth.com',
-          'staging-cdn.modrinth.com',
-          'github.com',
-          'raw.githubusercontent.com',
-          'img.shields.io',
-          'i.postimg.cc',
-          'wsrv.nl',
-          'cf.way2muchnoise.eu',
-          'bstats.org',
-        ]
-
-        if (!allowedHostnames.includes(url.hostname)) {
-          return xss.safeAttrValue(
-            tag,
-            name,
-            `https://wsrv.nl/?url=${encodeURIComponent(url.toString())}&n=-1`,
-            cssFilter
-          )
-        } else {
-          return xss.safeAttrValue(tag, name, url.toString(), cssFilter)
-        }
-      } catch (err) {}
-    }
-
-    return xss.safeAttrValue(tag, name, value, cssFilter)
-  },
-})
-
-export const md = (options = {}) => {
-  const md = new MarkdownIt('default', {
-    html: true,
-    linkify: true,
-    breaks: false,
-    ...options,
-  })
-
-  const defaultLinkOpenRenderer =
-    md.renderer.rules.link_open ||
-    function (tokens, idx, options, _env, self) {
-      return self.renderToken(tokens, idx, options)
-    }
-
-  md.renderer.rules.link_open = function (tokens, idx, options, env, self) {
-    const token = tokens[idx]
-    const index = token.attrIndex('href')
-
-    if (index !== -1) {
-      const href = token.attrs[index][1]
-
-      try {
-        const url = new URL(href)
-        const allowedHostnames = ['modrinth.com']
-
-        if (allowedHostnames.includes(url.hostname)) {
-          return defaultLinkOpenRenderer(tokens, idx, options, env, self)
-        }
-      } catch (err) {}
-    }
-
-    tokens[idx].attrSet('rel', 'noopener nofollow ugc')
-
-    return defaultLinkOpenRenderer(tokens, idx, options, env, self)
-  }
-
-  return md
-}
-
-export const renderString = (string) => configuredXss.process(md().render(string))
diff --git a/pages/[type]/[id].vue b/pages/[type]/[id].vue
index 66eca2025..b5884b3e3 100644
--- a/pages/[type]/[id].vue
+++ b/pages/[type]/[id].vue
@@ -768,6 +768,7 @@ import {
   PlusIcon,
   Checkbox,
   ChartIcon,
+  renderString,
 } from 'omorphia'
 import CrownIcon from '~/assets/images/utils/crown.svg'
 import CalendarIcon from '~/assets/images/utils/calendar.svg'
@@ -809,7 +810,6 @@ import LinksIcon from '~/assets/images/utils/link.svg'
 import LicenseIcon from '~/assets/images/utils/copyright.svg'
 import GalleryIcon from '~/assets/images/utils/image.svg'
 import VersionIcon from '~/assets/images/utils/version.svg'
-import { renderString } from '~/helpers/parse.js'
 import { reportProject } from '~/utils/report-helpers.ts'
 import Breadcrumbs from '~/components/ui/Breadcrumbs.vue'
 import { userCollectProject } from '~/composables/user.js'