another clusterfuzz spotted issue (#15032)

Signed-off-by: Andrew Thornton <art27@cantab.net>
4 years ago · c0c052bdbb
parent 0e95a41ccd
commit c0c052bdbb
1 changed files with 1 additions and 1 deletions
--- a/modules/markup/html.go
+++ b/modules/markup/html.go
@ -313,7 +313,7 @@ func RenderEmoji(
 	return ctx.postProcess(rawHTML)
 }

-var tagCleaner = regexp.MustCompile(`<((?:/?\w+/\w+)|(?:/[\w ]+/)|(/?[hH][tT][mM][lL][ />]))`)
+var tagCleaner = regexp.MustCompile(`<((?:/?\w+/\w+)|(?:/[\w ]+/)|(/?[hH][tT][mM][lL][ />])|(/?[hH][eE][aA][dD][ />]))`)
 var nulCleaner = strings.NewReplacer("\000", "")

 func (ctx *postProcessCtx) postProcess(rawHTML []byte) ([]byte, error) {