|
17e33bc0
|
2016-11-20T12:52:54
|
|
Reduce risk of XSS (#1051)
* Skip non-own properties of env.attributes
Use `Object.keys` instead of a for-in loop to find optional attributes.
The former only grabs keys that are own properties, the latter also
includes inherit properties from `Object.prototype`.
This reduces the risk of XSS if an attacker somehow manages to
manipulate the prototype chain of the Object prototype.
* Fix root cause of XSS in autolinker plugin #1054
* command-line plugin: Safely encode attributes
If an attacker has control over the values of the attributes
"data-prompt", "data-user", or "data-host", then XSS was possible.
This fixes the issue, by encoding quotes as the `"` entity.
* show-language plugin: innerHTML -> textContent
There is no need for `innerHTML` here. At best nothing happens,
at worst XSS is possible (though the odds are negligible since
the attacker would have to control the detected language).
* toolbar plugin: innerHTML -> textContent
|
|
02514710
|
2016-11-19T12:18:05
|
|
Run gulp
|
|
3cae6ce8
|
2016-11-19T12:16:31
|
|
Add support for Reason. Fix #1046
|
|
07b81ac7
|
2016-11-08T20:08:49
|
|
Plugins: Toolbar & Copy to Clipboard (#891)
* Add prism-toolbar plugin
This plugin exposes a `registerButton` method, which other
plugins can use to add buttons to the toolbar. Comes with
styles.
* Add demo file for toolbar plugin
Registers a "Hello World!" tag with the toolbar.
* Make `toolbar.registerButton` polymorphic
This allows developers to provide either a callback or an object
with a `text` string and an optional `onClick` function to create
a new button.
* Add Toolbar & Copy to Clipboard to components.js
* Add Copy to Clipboard plugin
* Switch `innerHTML` to `textContent`
This ensures additional HTML can't be passed to the toolbar
via the `text` property, ensuring a consistent display for the
buttons.
* Use `call` to bind `this` to the `onClick` method
This provides access to the clicked element, which is what `this`
is usually bound to on event listeners.
* Add hover animation to toolbar
* Add drop shadow to toolbar buttons
* Add `clipboard` to `optionalDependencies`
This will install Clipboard.js when installing from `npm`, but
won't fail the build if the installation of Clipboard.js fails.
* Load Clipboard.js from CDN if not present
* Display plugin code using data-src
* Recompile prism-toolbar
* Update Show Languages to be a Toolbar button
Show Languages now registers a callback with the toolbar
plugin to return an element with the language in it.
* Add basic HTML API & documentation
The Toolbar will now be able to read a `data-label` attribute
and add it to the code snippet.
* Switch a -> button when only providing onClick
Also adds a `url` property which creats an anchor tag and sets
the href. Adds some styles to override the button defaults.
* Add support for data-url to create anchor tag
This allows the HTML API to create links in the Toolbar.
* Update toolbar to allow order controlled via HTML
Uses a data-attribute on the `body` tag to update the order,
should the user choose to do so.
* Allow template element to provide content to label
This provides one of several options a user can implement in order to
get a custom button.
Also fixes some bugs in the documentation.
* Fix bug when combined with the autoloader plugin
The autoloader will rehighlight the element after the language arrives.
This means the complete hook can run multiple times. Without a check,
multiple toolbars can get added to an element.
|
|
dfc19413
|
2016-11-09T01:57:46
|
|
Add support for the Jolie language (#1014)
* Added component for the Jolie language
* Added Jolie among the supported components
* update for merge
- revised jolie component
- added tests
- added code example
- minified with `gulp`
* fixes
* fixes
* fixed Jolie html file example and highlight for punctuation
* fixed indentation in test html file and added comma as punctuation
|
|
a0bd686e
|
2016-09-30T19:53:42
|
|
Merge pull request #950 from dvkndn/gh-pages
add plugin custom class name
|
|
fa68f913
|
2016-09-28T15:07:19
|
|
Fix grammar in Readme
|
|
22cb0187
|
2016-09-14T05:44:22
|
|
Fix typo `Fload` to `Float` in prism-ruby.js (#1023)
|
|
f89b0b96
|
2016-09-02T00:45:09
|
|
Autoloader plugin: don't try to load "none" component. Fix #1000
|
|
86aa3d21
|
2016-09-01T23:43:11
|
|
Revert #998 + run normalize-whitespace and remove-initial-line-feed plugins in the before-sanity-check hook. Fix #1018 (see issue for discussion)
|
|
cda106f9
|
2016-08-15T02:45:50
|
|
update min file and reverse core
|
|
e9355cc4
|
2016-08-15T02:43:09
|
|
add prefix feature for custom class plugin
|
|
820c7b79
|
2016-08-14T22:53:33
|
|
Merge branch 'gh-pages' of https://github.com/PrismJS/prism into gh-pages
|
|
5e568330
|
2016-07-19T18:20:18
|
|
Remove unneeded prefixed CSS (#989)
This PR removes
– prefixed `linear-gradient`
– prefixed `box-shadow`
– prefixed `border-radius`
– prefixed `opacity` + legacy IE alternatives
– `-moz-transition` (http://caniuse.com/css-transitions)
|
|
bdca61bf
|
2016-07-14T12:01:52
|
|
Merge pull request #996 from Golmote/data-uri-highlight
Data-URI Highlight plugin Fix #485
|
|
1b19ff08
|
2016-07-14T11:31:41
|
|
Fix WPD plugin's page
|
|
26267281
|
2016-07-14T11:27:02
|
|
Fix WPD at-rule detection + don't process if language is not handled + fix plugin's page
|
|
b6ab75b6
|
2016-07-11T07:56:02
|
|
Comment are not candidates for data-uri highlight plugin
|
|
e5587a76
|
2016-07-10T14:14:50
|
|
Added aria-hidden attributes on elements created by the Line Highlight and Line Numbers plugins. Fixes #574.
|
|
5f1b3826
|
2016-07-10T13:56:08
|
|
Data-URI Highlight plugin
|
|
2b0cc8ab
|
2016-07-04T21:06:44
|
|
Xojo does not need to require Basic
|
|
5e62f023
|
2016-07-04T20:13:26
|
|
Add support for Xojo. Fix #898
|
|
5c815d35
|
2016-07-04T08:59:15
|
|
Add progress indicator on "Download all grammars" link on Autoloader plugin page
|
|
0d0a0071
|
2016-07-04T08:46:47
|
|
Merge pull request #981 from Golmote/autoloader-download-all
Download all grammars as a Zip directly from the Autoloader plugin page. Fix #960
|
|
96719967
|
2016-07-03T23:43:37
|
|
Remove duplicated script on autoloader plugin page
|
|
9c5ffb5e
|
2016-06-27T01:26:39
|
|
Merge remote-tracking branch 'official/gh-pages' into prism-livescript
Conflicts:
plugins/show-language/prism-show-language.js
plugins/show-language/prism-show-language.min.js
|
|
be6219a8
|
2016-06-27T01:21:50
|
|
Merge pull request #980 from Golmote/prism-properties
Add support for .properties files
|
|
9cfc8cb2
|
2016-06-18T19:39:36
|
|
Add support for LiveScript
|
|
4a3cdfee
|
2016-06-18T15:45:25
|
|
Add a way to download all grammars as a Zip directly from the Autoloader plugin page
|
|
b4f34239
|
2016-06-18T15:01:08
|
|
Add a couple more details on how to use the Autoloader plugin
|
|
2607dcd9
|
2016-06-18T14:46:44
|
|
Add support for .properties files
|
|
bfb559bf
|
2016-06-11T01:17:24
|
|
Add support for GraphQL
|
|
9385c54f
|
2016-06-05T07:14:20
|
|
Add class that disables the normalize whitespace plugin
|
|
e6c34988
|
2016-05-12T14:13:30
|
|
Fixed monospace typo
The original value was "monoscpace," and I changed it to "monospace."
|
|
863f5f18
|
2016-05-06T21:17:47
|
|
add plugin custom class name
|
|
21dd0d14
|
2016-02-15T23:08:24
|
|
Use a HTML-comment to escape code
|
|
9cbf9d77
|
2016-04-30T12:04:06
|
|
Update auto-generated values in the autoloader plugin
The auotloader plugin contains a variable that is auto-generated
by gulp. This variable was updated by the addition of the new
language protobuf.
|
|
f081b905
|
2016-04-29T16:39:46
|
|
Rename proto language into protobuf and add it to components.js
|
|
cd234dcd
|
2016-03-08T19:26:52
|
|
update linear-gradient syntax from `left` to `to right`
|
|
8cf72b33
|
2016-02-26T10:20:41
|
|
Remove the force-to-the-top hack for normalize-whitespace
|
|
54400fba
|
2016-02-17T15:26:01
|
|
Add property 'aliasTitles' to components.js
This is necessary, because a language that has a lot of aliases
like markup (HTML, SVG, XML, MathML), is only added to the
languageMap once as "Markup". So any plugin that depends on the
languageMap is limited by that.
This patch allows the definition of additional titles for
languages, depending on the alias that is used.
|
|
e29cbe1c
|
2016-02-15T15:47:48
|
|
[unescaped markup] Fix small issues @zeitgeist87 pointed out
|
|
ad30c323
|
2016-02-14T21:25:57
|
|
[unescaped markup] Fixed bug with escaped </script>
|
|
07d77e53
|
2016-02-14T21:08:34
|
|
Added unescaped markup plugin (hidden)
|
|
99c30e4e
|
2016-02-12T11:03:08
|
|
Add missing prism.js to the documentation of normalize-whitespace
|
|
f1c71994
|
2016-02-12T10:53:38
|
|
Cleanup normalize-whitespace and improve keep-markup integration
This patch removes the misleading references to the parse-settings
plugin from the normalize-whitespace documentation and adds a
description for all supported operations.
The keep-markup plugin sets the property Prism.plugins.KeepMarkup
to allow the normalize-whitespace plugin to optimize its
operation.
Furthermore, the normalize-whitespace plugin makes sure, that it
is the first plugin to run on a particular code block.
|
|
6880b3c1
|
2016-02-10T11:08:44
|
|
Preserve Markup in Normalize-Whitespace plugin
Since the Normalize-Whitespace plugin is only concerned with
whitespace, it is easy to preserve the markup for other plugins
like keep-markup.
|
|
eb68eb83
|
2016-02-07T18:53:04
|
|
Update CHANGELOG and run gulp
|
|
8f79f3b3
|
2016-02-06T16:36:30
|
|
Merge pull request #880 from montogeek/gh-pages
Fix Keep Markup plugin incorrect highlighting
|
|
24841ef3
|
2016-02-06T16:21:04
|
|
Removed firstWhiteSpaces code
|
|
ef533229
|
2016-02-06T15:06:29
|
|
Merge pull request #847 from zeitgeist87/WhitespaceNormalizer
Whitespace normalizer plugin
|
|
38b7b3b6
|
2016-02-06T15:49:01
|
|
Add support for automatic line breaks
This patch adds support for automatic line breaks after a
specific number of characters. The default is 80 characters, but
it can be set to any number.
|
|
704ba4f9
|
2016-02-06T00:02:15
|
|
Fix Keep Markup plugin incorrect highlighting
|
|
05442d3e
|
2016-02-01T14:16:13
|
|
Add support for the space character for the show-invisibles plugin
This patch adds a bit of position magic, so that the invisibles
are displayed on top of the original character. This allows for
the inclusion of the space character.
|
|
c3cfb1fb
|
2016-01-30T14:46:38
|
|
Ensure show-invisibles compat with autoloader
When using the autoloader, the language isn't loaded
at the time the show-invisibles plugin attaches its
extra tokens. This defers attaching the extra tokens
to just before highlighting, so we ensure we're able
to attach to the language grammar.
|
|
b184c269
|
2016-01-22T17:38:38
|
|
Merge pull request #830 from malcomio/sasslink
link scss to webplatform wiki - fixes #829
|
|
e86ec01f
|
2016-01-07T10:39:37
|
|
Add whitespace-normalizer plugin
This plugin normalizes whitespace in code blocks. It can perform
various operations. The user can configure them through the plugin
object located at Prism.plugins.NormalizeWhitespace.
Prism.plugins.NormalizeWhitespace.setDefaults({
'remove-trailing': true,
'remove-indent': true,
'left-trim': true,
'right-trim': true,
/*'indent': 2,
'remove-initial-line-feed': false,
'tabs-to-spaces': 4,
'spaces-to-tabs': 4*/
});
The plugin can be disabled for certain code blocks, by adding the
class "no-whitespace-normalization" to it.
There is also a HTML-interface using the parse-settings plugin.
|
|
dfa52631
|
2016-01-02T14:33:53
|
|
Merge pull request #845 from chriswells0/command-line
Remove the need for an "output" class.
|
|
3656a085
|
2015-12-30T13:28:00
|
|
Remove unnecessary check for the existence of the addEventListener
method
All target browsers for Prism support this method now. The check
is therefore obsolete.
|
|
298dca59
|
2015-12-29T19:36:08
|
|
Remove the need for an "output" class.
|
|
a912063c
|
2015-12-30T00:56:38
|
|
Update auto-generated files and minified versions
|
|
bfd6b99e
|
2015-12-30T00:30:37
|
|
Merge pull request #831 from chriswells0/prism-shell
Add support for Command Line highlighting
|
|
9d6343a3
|
2015-12-30T00:16:24
|
|
Merge pull request #844 from chriswells0/file-highlight
Defer File Highlight until the full DOM has loaded.
|
|
6f995ef2
|
2015-12-29T17:44:06
|
|
Defer File Highlight until the full DOM has loaded.
|
|
d9b351f0
|
2015-12-27T11:03:43
|
|
Use the file-highlight plugin to load the example for the
data-language attribute on the demo page of the show-language
plugin.
There is no need to include a whole copy of logo.svg on the
example page.
|
|
97d0f49a
|
2015-12-26T09:50:23
|
|
Update auto-generated files
|
|
7e74aef4
|
2015-12-12T21:08:15
|
|
Allow custom label without a language mapping.
|
|
eb9a83c2
|
2015-12-17T21:02:26
|
|
The data-language attribute is no longer of any use, so remove it from the code.
It was only applicable when using CSS pseudo elements to show the language name, which is no longer the case.
|
|
83789062
|
2015-11-29T20:27:14
|
|
Add Command Line plugin.
|
|
544b56f0
|
2015-12-12T20:21:52
|
|
Fix incorrect page title.
|
|
08d979a0
|
2015-11-27T09:11:05
|
|
link scss to webplatform wiki - fixes #829
|
|
e8a31a50
|
2015-10-26T08:16:29
|
|
Merge pull request #814 from Golmote/prism-kotlin
Add support for Kotlin
|
|
d7faf2cb
|
2015-10-26T08:15:40
|
|
Run gulp
|
|
eb7aa969
|
2015-10-22T07:12:42
|
|
Add support for Kotlin
|
|
c02b11f6
|
2015-10-21T06:35:40
|
|
Run gulp
|
|
77c0b061
|
2015-10-21T06:32:15
|
|
Merge branch 'gh-pages' into prism-parser
Conflicts:
components.js
|
|
804ed779
|
2015-10-16T08:00:50
|
|
Run gulp
|
|
6803ca03
|
2015-10-16T07:58:39
|
|
Merge pull request #800 from Golmote/prism-asciidoc
Add support for AsciiDoc
|
|
e25da0da
|
2015-10-15T08:55:07
|
|
Add support for Haxe
|
|
9652d752
|
2015-10-13T21:39:58
|
|
Add some missing checks to prevent errors in IE8. Fix #9
|
|
2ba763e0
|
2015-10-13T21:08:49
|
|
Add support for Parser
|
|
b938d2ce
|
2015-10-10T16:45:02
|
|
Merge branch 'gh-pages' into prism-previewer-angle
Conflicts:
components.js
|
|
88173de6
|
2015-10-10T16:42:49
|
|
Merge pull request #790 from Golmote/prism-previewer-time
Plugin: time previewer
|
|
6679e735
|
2015-10-10T16:38:02
|
|
Add support for PARI/GP
|
|
68159d5b
|
2015-10-10T03:57:25
|
|
Add support for AsciiDoc
|
|
9a63483e
|
2015-10-07T00:38:04
|
|
Merge pull request #783 from Golmote/prism-previewer-gradient
Plugin: gradient previewer
|
|
2fcc7d05
|
2015-10-05T09:14:05
|
|
Plugin: angle previewer
|
|
7c7ab4ef
|
2015-10-05T08:55:17
|
|
Plugin: easing previewer: Add variable examples + add support for Sass variables
|
|
3a1fb04a
|
2015-10-05T08:50:48
|
|
Plugin: color previewer: Add support for Sass variables
|
|
1d61959b
|
2015-10-05T08:47:54
|
|
Plugin: gradient previewer: Add variable examples + add support for Sass variables
|
|
752650e0
|
2015-10-03T09:13:04
|
|
Plugin: time previewer
|
|
6d94e037
|
2015-10-04T21:29:28
|
|
Run gulp
|
|
6268dc04
|
2015-10-02T23:14:44
|
|
Add check for extsting divs, making it reentrant.
|
|
d37d6b86
|
2015-10-01T09:01:50
|
|
Previewer: gradient: Fix stylus var declaration + insert before Color Previewer if it exists
|
|
3a346e5e
|
2015-09-30T17:31:15
|
|
Fix the problem of language label scrolling out of view with code by moving the label to a previous sibling of 'pre'.
|
|
1ebac75a
|
2015-09-30T08:54:44
|
|
Plugin: gradient previewer
|
|
4303c940
|
2015-09-29T07:51:35
|
|
Plugin Previewer: Easing: Fix markers url due to base href in plugin page
|
|
513137c7
|
2015-09-27T11:06:06
|
|
Merge pull request #773 from Golmote/previewer-easing
Plugin: easing previewer
|
|
89c5f34c
|
2015-09-27T11:04:37
|
|
Run gulp task
|
|
69ea994e
|
2015-09-24T09:03:36
|
|
Add support for vim. Closes #777
|