This commit is contained in:
marshaung 2026-07-16 11:07:30 +08:00 committed by GitHub
commit 81d38da939
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 34 additions and 1 deletions

View File

@ -20,7 +20,12 @@
const CODE_ZONE_RE = /<(pre|code|script|style)\b[^>]*>[\s\S]*?<\/\1>/gi;
const TAG_RE = /<[^>]+>/g;
const URL_RE = /\bhttps?:\/\/\S+/g;
// \u0000 is the placeholder sentinel (see PLACEHOLDER below). It must be
// excluded here: URLs are carved AFTER tags, so a URL sitting flush against
// a tag (`<a href="...">https://ex.com</a>`) would otherwise let \S+ swallow
// the placeholder standing in for `</a>` — that placeholder then never
// restores (restore is a single pass) and the tag is lost.
const URL_RE = /\bhttps?:\/\/[^\s\u0000]+/g;
/**
* Apply smartypants to an HTML string. Zones that should not be touched:

View File

@ -56,6 +56,34 @@ describe("smartypants", () => {
expect(out).toContain("\u201cdetails\u201d");
});
// A URL flush against a following tag (no whitespace between) used to let
// URL_RE's \S+ swallow the placeholder standing in for that tag. The
// placeholder never restored, so the tag vanished and its styling bled
// into the rest of the document. The test above misses this because its
// URL is followed by a space.
test("does not leak placeholders for a bare autolinked URL", () => {
const input = `<p>see <a href="https://ex.com">https://ex.com</a> ok</p>`;
const out = smartypants(input);
expect(out).not.toContain("SMARTPANTS_PRESERVED");
expect(out).toContain("</a>");
expect(out).toBe(input);
});
test("does not leak placeholders for a bold URL", () => {
const input = `<p>see <strong><a href="https://ex.com">https://ex.com</a></strong> ok</p>`;
const out = smartypants(input);
expect(out).not.toContain("SMARTPANTS_PRESERVED");
expect(out).toContain("</a></strong>");
expect(out).toBe(input);
});
test("does not leak placeholders when a URL is followed by punctuation", () => {
const input = `<p>see <a href="https://ex.com">https://ex.com</a>, ok</p>`;
const out = smartypants(input);
expect(out).not.toContain("SMARTPANTS_PRESERVED");
expect(out).toContain("</a>");
});
test("does NOT touch HTML attribute values", () => {
const out = smartypants(`<a href="it's-a-test.html">link</a>`);
expect(out).toContain(`href="it's-a-test.html"`);