18 Commits

Author	SHA1	Message	Date
Daniel Pivovarov	33de6fef67	fix(horizontal-rule): fix insertion behavior (#4898)	2024-06-14 04:51:52 +02:00
Nick the Sick	738c436a9f	fix: disable parsing javascript: links, add tests	2024-05-16 17:10:15 +02:00
Christofer Roth	980b54f62b	fix(extension-link): use whitelist for allowed href values	2024-05-16 09:05:42 +02:00
Lukas Hirt	099e10df92	fix: mark nocookie youtube url as valid when parsing html (#4883)	2024-02-19 10:32:57 +01:00
Cameron Hessler	e6947bad2d	fix(extension-youtube) fix lint	2023-11-20 18:48:22 +01:00
Cameron Hessler	1bd714a408	fix(extension-youtube) change regex to disallow non-youtube domains	2023-11-20 18:48:22 +01:00
Cameron Hessler	7debf2baf0	fix(extension-youtube) Add fix for link too	2023-11-20 18:48:22 +01:00
Cameron Hessler	04a11355a7	fix(extension-youtube) XSS risk with src tag ... Fixes risks outline in #4600 by verifying that any src urls are valid youtube URLs before rendering as HTML. My thoughts are that this attack vector would be difficult to use because the attacker would have to have a way to manipualte the TipTap payload in a manner that bypasses the youtube extension's `setYoutubeVideo` command, which already checks for valid URLs.	2023-11-20 18:48:22 +01:00
Sven Adlung	348383b96c	fix(tests): fix failing cypress tests and update cypress ... * test: update cypress and migrate configs * test: fix codeBlockLowlight test * test: bump cypress actions	2022-09-26 11:06:01 +02:00
Dominik	8c6751f0c6	add precommit hook for linting and automatic eslint fixes + update eslint packages (#2862) ... * chore: add precommit hook for eslint fixes, fix linting issues * chore: add eslint import sort plugin	2022-06-08 14:10:25 +02:00
Enrique Alcántara	39f5e4c31e	Declare lowlight as a peerDependency (#2625) ... Declare lowlight as a peerDependency to delegate the control of which version of lowlight is used to the client application Co-authored-by: Enrique Alcantara <ealcantara@gitlab.com>	2022-06-06 19:33:52 +02:00
Philipp Kühn	e07a5b625d	refactor: Use named exports instead of default exports (#2238) ... * use named exports instead of default exports * fix tests Co-authored-by: Philipp Kühn <philippkuehn@MacBook-Pro-von-Philipp.local>	2021-12-06 12:00:09 +01:00
Philipp Kühn	40a9404c94	add newline-after-var rule to eslint config	2021-12-03 00:03:39 +01:00
Philipp Kühn	723b955cec	feat: Integrate input rules and paste rules into the core (#1997) ... * refactoring * improve link regex * WIP: add new markPasteRule und linkify to image mark * move copy of inputrule to core * trigger codeblock inputrule on enter * refactoring * add regex match to markpasterulematch * refactoring * improve link regex * WIP: add new markPasteRule und linkify to image mark * move copy of inputrule to core * trigger codeblock inputrule on enter * refactoring * add regex match to markpasterulematch * update linkify * wip * wip * log * wip * remove debug code * wip * wip * wip * wip * wip * wip * wip * wip * rename matcher * add data to ExtendedRegExpMatchArray * remove logging * add code option to marks, prevent inputrules in code mark * remove link regex * fix codeblock inputrule on enter * refactoring * refactoring * refactoring * refactoring * fix position bug * add test * export InputRule and PasteRule * clean up link demo * fix types	2021-10-08 15:02:09 +02:00
Enrique Alcántara	54be0e570e	fix: Allow extending code-block-lowlight (#1917) ... Use the extension name when initializing the LowlightPlugin. In this way, several extensions can make use of the same plugin Co-authored-by: Enrique Alcantara <ealcantara@gitlab.com>	2021-09-21 09:26:11 +02:00
Philipp Kühn	a2b03d4cec	refactoring	2020-11-26 20:56:02 +01:00
Hans Pagel	5685cf83a4	improve link testing	2020-11-24 17:26:47 +01:00
Hans Pagel	f9860c54a9	test bold and link regex	2020-10-08 14:39:44 +02:00