Skip to content

Render specific tag cause infinite loop #305

Open
@ghost

Description

Here is the situation I encountered:

Ignore how strange the string is, which is Test Engineer's works, once executed, it will fall into an infinite loop.

Even breakpoint debugging can't work.

So I post here for solution.

const remarkable = new Remarkable('full', {
    html: true,
    xhtmlOut: false,
    breaks: false,
    langPrefix: 'language-',
    linkify: true,
    linkTarget: '_blank',
    typographer: false,
    quotes: '“”‘’',
});

const html = `
<img src=# onerror=’alert(document.cookie)/><!--‘
<img src=https://dn-coding-net-production-pp.qbox.me/63d4c242-e9c4-4b61-9e61-9adad4bb6b15.png />
`;

remarkable.render(html);

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions