showdown to marked

change from shown to marked due library security issues
alloylab · Feb 8, 2024 · 48dcc31 · 48dcc31
1 parent 99d9e2f
commit 48dcc31
Show file tree

Hide file tree

Showing 5 changed files with 12 additions and 6 deletions.
diff --git a/src/manifest.json b/src/manifest.json
@@ -12,7 +12,8 @@
             ],
             "js": [
                 "vendor/jquery.min.js",
-                "vendor/showdown.min.js",
+                "vendor/purify.min.js",
+                "vendor/marked.min.js",
                 "cleanup/script.js",
                 "notes/script.js"
             ]

diff --git a/src/notes/script.js b/src/notes/script.js
@@ -7,8 +7,7 @@ const notesObserver = new MutationObserver(function () {
             let content = note.html().replace(/&lt;/g, '<').replace(/&gt;/g, '>')
                 .replace(/<\bspan\b>/g, '').replace(/<\/\bspan\b>/g, '').trim();
 
-            let converter = new showdown.Converter();
-            let markdown = converter.makeHtml(content);
+            let markdown = DOMPurify.sanitize(marked.parse(content));
             $(this).replaceWith(markdown);
         });
     }

diff --git a/src/vendor/marked.min.js b/src/vendor/marked.min.js