diff options
| author | Bjørn Erik Pedersen <bjorn.erik.pedersen@gmail.com> | 2025-01-21 18:52:58 +0100 |
|---|---|---|
| committer | Bjørn Erik Pedersen <bjorn.erik.pedersen@gmail.com> | 2025-01-22 09:44:26 +0100 |
| commit | 637995ba8f14d3100d2ef185489836d3dd19165c (patch) | |
| tree | 82a9fc2eca8b1dacfb3d1719da5a2e7aeeacac24 /markup/goldmark/goldmark_integration_test.go | |
| parent | f1de5d2a043ea2271419c0ff145e7f76044be7e8 (diff) | |
| download | hugo-637995ba8f14d3100d2ef185489836d3dd19165c.tar.gz hugo-637995ba8f14d3100d2ef185489836d3dd19165c.zip | |
Also handle inline HTML comments
Diffstat (limited to 'markup/goldmark/goldmark_integration_test.go')
| -rw-r--r-- | markup/goldmark/goldmark_integration_test.go | 19 |
1 files changed, 18 insertions, 1 deletions
diff --git a/markup/goldmark/goldmark_integration_test.go b/markup/goldmark/goldmark_integration_test.go index 23e22b5ca..356e60153 100644 --- a/markup/goldmark/goldmark_integration_test.go +++ b/markup/goldmark/goldmark_integration_test.go @@ -885,10 +885,27 @@ title: "p1" <img border="0" src="pic_trulli.jpg" alt="Trulli"> --> -XSS +## XSS <!-- --><script>alert("I just escaped the HTML comment")</script><!-- --> + +## More + +This is a <!--hidden--> word. + +This is a <!-- hidden--> word. + +This is a <!-- hidden --> word. + +This is a <!-- +hidden --> word. + +This is a <!-- +hidden +--> word. + + -- layouts/_default/single.html -- {{ .Content }} ` |