sanatize uppercase hexidecimal

fixes #925
markedjs · Dec 23, 2017 · 6d1901f · 6d1901f
1 parent 76530ed
commit 6d1901f
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 2 deletions.
diff --git a/lib/marked.js b/lib/marked.js
@@ -1096,8 +1096,8 @@ function escape(html, encode) {
 }
 
 function unescape(html) {
-	// explicitly match decimal, hex, and named HTML entities 
-  return html.replace(/&(#(?:\d+)|(?:#x[0-9A-Fa-f]+)|(?:\w+));?/g, function(_, n) {
+	// explicitly match decimal, hex, and named HTML entities
+  return html.replace(/&(#(?:\d+)|(?:#x[0-9A-Fa-f]+)|(?:\w+));?/ig, function(_, n) {
     n = n.toLowerCase();
     if (n === 'colon') return ':';
     if (n.charAt(0) === '#') {

diff --git a/test/tests/uppercase_hex.sanitize.html b/test/tests/uppercase_hex.sanitize.html
@@ -0,0 +1,2 @@
+<p>lowerlower
+upperupper</p>
diff --git a/test/tests/uppercase_hex.sanitize.text b/test/tests/uppercase_hex.sanitize.text
@@ -0,0 +1,2 @@
+lower[click me](javascript&#x3a;...)lower
+upper[click me](javascript&#X3a;...)upper