From 64a3afe35a8f2addfa994ce5e6272be7538e4a07 Mon Sep 17 00:00:00 2001 From: Robin Ward <robin.ward@gmail.com> Date: Sun, 8 Dec 2013 22:22:08 -0500 Subject: [PATCH] Only allow a recursive depth of 3 for markdown links. --- vendor/assets/javascripts/better_markdown.js | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/vendor/assets/javascripts/better_markdown.js b/vendor/assets/javascripts/better_markdown.js index 0bfeb29ed..b80a1d069 100644 --- a/vendor/assets/javascripts/better_markdown.js +++ b/vendor/assets/javascripts/better_markdown.js @@ -1250,6 +1250,15 @@ "[": function link( text ) { + var open = 1; + for (var i=0; i<text.length; i++) { + var c = text.charAt(i); + if (c === '[') { open++; } + if (c === ']') { open--; } + + if (open > 3) { return [1, "["]; } + } + var orig = String(text); // Inline content is possible inside `link text` var res = inline_until_char.call( this, text.substr(1), "]" );