mirror of
https://github.com/tenrok/BBob.git
synced 2026-06-17 19:21:20 +03:00
Nikolay Kostyurin
44 lines
676 B
Markdown
44 lines
676 B
Markdown
---
|
|
"@bbob/parser": patch
|
|
"@bbob/cli": patch
|
|
"@bbob/core": patch
|
|
"@bbob/html": patch
|
|
"@bbob/plugin-helper": patch
|
|
"@bbob/preset": patch
|
|
"@bbob/preset-html5": patch
|
|
"@bbob/preset-react": patch
|
|
"@bbob/preset-vue": patch
|
|
"@bbob/react": patch
|
|
"@bbob/types": patch
|
|
"@bbob/vue2": patch
|
|
"@bbob/vue3": patch
|
|
---
|
|
|
|
Now `@bbob/parser` correctly parses tags like
|
|
|
|
```html
|
|
[url=javascript:alert('XSS ME');]TEXT[/url]
|
|
```
|
|
to correct attributes
|
|
```json
|
|
{
|
|
"tag": "url",
|
|
"attrs": {
|
|
"javascript:alert('XSS ME')": "javascript:alert('XSS ME')"
|
|
},
|
|
"content": [
|
|
"TEXT"
|
|
],
|
|
"start": {
|
|
"from": 0,
|
|
"to": 38
|
|
},
|
|
"end": {
|
|
"from": 38,
|
|
"to": 42
|
|
}
|
|
}
|
|
```
|
|
|
|
Fixes #300
|