Clusterfuzz found another way (#15160)

zeripath · web-flow · commit b68eb54f95f8 · 2021-03-26T01:21:00.000+02:00
Clusterfuzz found another way so I found another way to stop it

Signed-off-by: Andrew Thornton &lt;art27@cantab.net&gt;
diff --git a/modules/markup/html.go b/modules/markup/html.go
@@ -313,7 +313,7 @@ func RenderEmoji(
 	return ctx.postProcess(rawHTML)
 }
 
-var tagCleaner = regexp.MustCompile(`<((?:/?\w+/\w+)|(?:/[\w ]+/)|(/?[hH][tT][mM][lL][ />])|(/?[hH][eE][aA][dD][ />]))`)
+var tagCleaner = regexp.MustCompile(`<((?:/?\w+/\w+)|(?:/[\w ]+/)|(/?[hH][tT][mM][lL]\b)|(/?[hH][eE][aA][dD]\b))`)
 var nulCleaner = strings.NewReplacer("\000", "")
 
 func (ctx *postProcessCtx) postProcess(rawHTML []byte) ([]byte, error) {

Original file line number	Diff line number	Diff line change
`@@ -313,7 +313,7 @@ func RenderEmoji(`
`313`	`313`	`return ctx.postProcess(rawHTML)`
`314`	`314`	`}`
`315`	`315`
`316`		-var tagCleaner = regexp.MustCompile(`<((?:/?\w+/\w+)\|(?:/[\w ]+/)\|(/?[hH][tT][mM][lL][ />])\|(/?[hH][eE][aA][dD][ />]))`)
	`316`	+var tagCleaner = regexp.MustCompile(`<((?:/?\w+/\w+)\|(?:/[\w ]+/)\|(/?[hH][tT][mM][lL]\b)\|(/?[hH][eE][aA][dD]\b))`)
`317`	`317`	`var nulCleaner = strings.NewReplacer("\000", "")`
`318`	`318`
`319`	`319`	`func (ctx *postProcessCtx) postProcess(rawHTML []byte) ([]byte, error) {`