Do not process &-entities that don't end in ;

Fixes #278
commonmark · Jan 28, 2024 · 0f94755 · 0f94755
1 parent c7aef33
commit 0f94755
Show file tree

Hide file tree

Showing 3 changed files with 17 additions and 4 deletions.
diff --git a/lib/common.js b/lib/common.js
@@ -1,7 +1,7 @@
 "use strict";
 
 import encode from "mdurl/encode.js";
-import { decodeHTML } from "entities";
+import { decodeHTMLStrict } from "entities";
 
 var C_BACKSLASH = 92;
 
@@ -58,7 +58,7 @@ var unescapeChar = function(s) {
     if (s.charCodeAt(0) === C_BACKSLASH) {
         return s.charAt(1);
     } else {
-        return decodeHTML(s);
+        return decodeHTMLStrict(s);
     }
 };
 

diff --git a/lib/inlines.js b/lib/inlines.js
@@ -3,7 +3,7 @@
 import Node from "./node.js";
 import * as common from "./common.js";
 import fromCodePoint from "./from-code-point.js";
-import { decodeHTML } from "entities";
+import { decodeHTMLStrict } from "entities";
 import "string.prototype.repeat"; // Polyfill for String.prototype.repeat
 
 var normalizeURI = common.normalizeURI;
@@ -773,7 +773,7 @@ var removeBracket = function() {
 var parseEntity = function(block) {
     var m;
     if ((m = this.match(reEntityHere))) {
-        block.appendChild(text(decodeHTML(m)));
+        block.appendChild(text(decodeHTMLStrict(m)));
         return true;
     } else {
         return false;

diff --git a/test/regression.txt b/test/regression.txt
@@ -471,3 +471,16 @@ x <- 1
 <pre><code class="language-r">x &lt;- 1
 </code></pre>
 ````````````````````````````````
+
+#278
+```````````````````````````````` example
+&parag;
+
+&para
+
+&para;
+.
+<p>&amp;parag;</p>
+<p>&amp;para</p>
+<p>¶</p>
+````````````````````````````````