jyapayne/Nim
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

rst parser does not support 'raw' directive per default (security risk)

Browse source
This commit is contained in:
Araq 2012-05-01 22:55:06 +02:00
commit 28b68d914e
2 changed files with 11 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

8
compiler/rst.nim
View file

@ -68,6 +68,8 @@ type
roSkipPounds, ## skip ``#`` at line beginning (documentation
## embedded in Nimrod comments)
roSupportSmilies, ## make the RST parser support smilies like ``:)``
roSupportRawDirective ## support the ``raw`` directive (don't support
## it for sandboxing)
TRstParseOptions* = set[TRstParseOption]
@ -1629,7 +1631,11 @@ proc parseDotDot(p: var TRstParser): PRstNode =
of dkTitle: result = dirTitle(p)
of dkContainer: result = dirContainer(p)
of dkContents: result = dirContents(p)
of dkRaw: result = dirRaw(p)
of dkRaw:
if roSupportRawDirective in p.s.options:
result = dirRaw(p)
else:
rstMessage(p, errInvalidDirectiveX, d)
of dkCodeblock: result = dirCodeBlock(p)
of dkIndex: result = dirIndex(p)
else: rstMessage(p, errInvalidDirectiveX, d)