3 people 3b2d3b828d markup/highlight: Escape lineAnchors before passing it to Chroma ...

Chroma writes the line anchor prefix verbatim into the id and href
attributes it generates, so a lineAnchors value from a code-fence
attribute could inject markup into the rendered page.

Thanks to @DONG2209 for reporting this issue.

Co-Authored-By: Nguyễn Quốc Đồng <126535119+DONG2209@users.noreply.github.com>
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

2026-09-07 15:22:46 +02:00

..

asciidocext

markup/asciidocext: Fix TOC parsing for asciidoctor-html5s

2026-07-22 19:32:19 +02:00

blackfriday

Fix some typos

2024-11-28 11:20:02 +01:00

converter

Fix some recently introduced Position issues

2026-04-04 14:53:20 +02:00

goldmark

markup/highlight: Escape lineAnchors before passing it to Chroma

2026-09-07 15:22:46 +02:00

highlight

markup/highlight: Escape lineAnchors before passing it to Chroma

2026-09-07 15:22:46 +02:00

internal

markup: Escape code-fence attribute values in the default renderer

2026-08-28 13:03:09 +02:00

markup_config

Add markup.rst.syntaxHighlight option

2026-07-04 22:27:29 +02:00

org

all: Rework page store, add a dynacache, improve partial rebuilds, and some general spring cleaning

2024-01-27 16:28:14 +01:00

pandoc

markup/pandoc: Support pandoc 3.11 and later

2026-09-04 11:53:47 +02:00

rst

Add markup.rst.syntaxHighlight option

2026-07-04 22:27:29 +02:00

tableofcontents

Revert "markup/tableofcontents: Skip empty TOC levels"

2026-05-14 19:46:41 +02:00

markup_test.go

all: Rework page store, add a dynacache, improve partial rebuilds, and some general spring cleaning

2024-01-27 16:28:14 +01:00

markup.go

Create pages from _content.gotmpl

2024-05-14 13:12:08 +02:00