From db58cf06c24de1382e25f490f22bb5bd460addf7 Mon Sep 17 00:00:00 2001 From: Camila Belo Date: Tue, 3 Aug 2021 08:56:01 +0200 Subject: [PATCH] fix(techdocs-plugin): apply review suggestions - strict regex scope to avoid security issues - add techdocs prefix to the changeset file Signed-off-by: Camila Belo --- .../{chocolate-cake.md => techdocs-chocolate-cake.md} | 0 plugins/techdocs/src/reader/transformers/sanitizeDOM.ts | 6 +++--- 2 files changed, 3 insertions(+), 3 deletions(-) rename .changeset/{chocolate-cake.md => techdocs-chocolate-cake.md} (100%) diff --git a/.changeset/chocolate-cake.md b/.changeset/techdocs-chocolate-cake.md similarity index 100% rename from .changeset/chocolate-cake.md rename to .changeset/techdocs-chocolate-cake.md diff --git a/plugins/techdocs/src/reader/transformers/sanitizeDOM.ts b/plugins/techdocs/src/reader/transformers/sanitizeDOM.ts index 828c0eb052..73c3bd2237 100644 --- a/plugins/techdocs/src/reader/transformers/sanitizeDOM.ts +++ b/plugins/techdocs/src/reader/transformers/sanitizeDOM.ts @@ -14,9 +14,9 @@ * limitations under the License. */ -const TECHDOCS_CSS = /main\.[A-Fa-f0-9]{8}\.min\.css/; -const GOOGLE_FONTS = /fonts\.googleapis\.com/; -const GSTATIC_FONTS = /fonts\.gstatic\.com/; +const TECHDOCS_CSS = /main\.[A-Fa-f0-9]{8}\.min\.css$/; +const GOOGLE_FONTS = /^https:\/\/fonts\.googleapis\.com/; +const GSTATIC_FONTS = /^https:\/\/fonts\.gstatic\.com/; export const safeLinksHook = (node: Element) => { if (node.nodeName && node.nodeName === 'LINK') {