diff options
| -rw-r--r-- | src/houdini_html_u.c | 6 | ||||
| -rw-r--r-- | src/inlines.c | 7 |
2 files changed, 6 insertions, 7 deletions
diff --git a/src/houdini_html_u.c b/src/houdini_html_u.c index 30d08aa..ce57ea1 100644 --- a/src/houdini_html_u.c +++ b/src/houdini_html_u.c @@ -42,6 +42,7 @@ bufsize_t houdini_unescape_ent(cmark_strbuf *ob, const uint8_t *src, if (size >= 3 && src[0] == '#') { int codepoint = 0; int num_digits = 0; + int max_digits = 7; if (_isdigit(src[1])) { for (i = 1; i < size && _isdigit(src[i]); ++i) { @@ -55,6 +56,7 @@ bufsize_t houdini_unescape_ent(cmark_strbuf *ob, const uint8_t *src, } num_digits = i - 1; + max_digits = 7; } else if (src[1] == 'x' || src[1] == 'X') { @@ -69,9 +71,11 @@ bufsize_t houdini_unescape_ent(cmark_strbuf *ob, const uint8_t *src, } num_digits = i - 2; + max_digits = 6; } - if (num_digits >= 1 && num_digits <= 8 && i < size && src[i] == ';') { + if (num_digits >= 1 && num_digits <= max_digits && + i < size && src[i] == ';') { if (codepoint == 0 || (codepoint >= 0xD800 && codepoint < 0xE000) || codepoint >= 0x110000) { codepoint = 0xFFFD; diff --git a/src/inlines.c b/src/inlines.c index 263a39b..6b77311 100644 --- a/src/inlines.c +++ b/src/inlines.c @@ -784,18 +784,13 @@ static cmark_node *handle_backslash(subject *subj) { static cmark_node *handle_entity(subject *subj) { cmark_strbuf ent = CMARK_BUF_INIT(subj->mem); bufsize_t len; - int length_limit = 256; advance(subj); len = houdini_unescape_ent(&ent, subj->input.data + subj->pos, subj->input.len - subj->pos); - if (peek_char(subj) == '#') { - length_limit = 9; // includes #, optional x for hex, and ; - } - - if (len <= 0 || len > length_limit) + if (len <= 0) return make_str(subj, subj->pos - 1, subj->pos - 1, cmark_chunk_literal("&")); subj->pos += len; |