Flag the raw: pseudo-protocol with DENY_HTML -- if -fnohtml is set,

the raw: protocol is disabled no matter what because it lets you
stuff random html into your code.
This commit is contained in:
David Parsons
2009-06-05 23:37:24 -07:00
parent 5fad265c9b
commit 9b4acbb748
+1 -1
View File
@@ -615,7 +615,7 @@ static linkytype linkt = { 0, 0, "<a href=\"", "\"",
static linkytype specials[] = {
{ "id:", 3, "<a id=\"", "\"", 0, ">", "</a>", 0, IS_URL },
{ "class:", 6, "<span class=\"", "\"", 0, ">", "</span>", 0, 0 },
{ "raw:", 4, 0, 0, 0, 0, 0, 0, 0 },
{ "raw:", 4, 0, 0, 0, 0, 0, DENY_HTML, 0 },
{ "abbr:", 5, "<abbr title=\"", "\"", 0, ">", "</abbr>", 0, 0 },
} ;