Socket
Socket
Sign inDemoInstall

markdown-it

Package Overview
Dependencies
5
Maintainers
1
Versions
79
Alerts
File Explorer

Advanced tools

Install Socket

Detect and block malicious and high-risk dependencies

Install
2345
8Next

14.1.0

Diff

Changelog

Source

[14.1.0] - 2024-03-19

Changed

  • Updated CM spec compatibility to 0.31.2, #1009.

Fixed

  • Fixed quadratic complexity when parsing references, #996.
  • Fixed quadratic output size with pathological user input in tables, #1000.
vitaly
published 14.0.0 •

Changelog

Source

[14.0.0] - 2023-12-08

Changed

  • Drop ancient browsers support (use .fromCodePoint and other features).
  • Rewrite to ESM (including all plugins/deps). CJS fallback still available. No signatures changed, except markdown-it-emoji plugin.
  • Dropped dist/ folder from repo, build on package publish.
  • Set punicode.js as external dependency.

Fixed

  • Html tokens inside img alt are now rendered as their original text, #896.
  • Hardbreaks inside img alt are now rendered as newlines.
vitaly
published 13.0.2 •

Changelog

Source

[13.0.2] - 2023-09-26

Security

  • Fixed crash/infinite loop caused by linkify inline rule, #957.

Fixed

  • Throw an error if 3rd party plugin doesn't increment line or pos counters (previously, markdown-it would likely go into infinite loop instead), #847.
vitaly
published 13.0.1 •

Changelog

Source

[13.0.1] - 2022-05-03

Fixed

  • Bumped linkify-it to 4.0.1. That should fix some hangs, caused by wrong data, returned from linkify-it.
vitaly
published 13.0.0 •

Changelog

Source

[13.0.0] - 2022-04-22

Added

  • Added a new token type text_special to store escaped characters, same as text but unaffected by replacement plugins (smartquotes, typographer, linkifier, etc.).
  • Added a new rule text_join in core ruler. Text replacement plugins may choose to insert themselves before it.

Changed

  • (p) is no longer replaced with § by typographer (conflicts with ℗), #763.
  • text_collapse rule is renamed to fragments_join.

Fixed

  • Smartquotes, typographic replacements and plain text links can now be escaped with backslash (e.g. \(c) or google\.com are no longer replaced).
  • Fixed collision of emphasis and linkifier (so http://example.org/foo._bar_-_baz is now a single link, not emphasized). Emails and fuzzy links are not affected by this.
vitaly
published 12.3.2 •

Changelog

Source

[12.3.2] - 2022-01-08

Security

  • Fix possible ReDOS in newline rule. Thanks to @MakeNowJust.
vitaly
published 12.3.1 •

Changelog

Source

[12.3.1] - 2022-01-07

Fixed

  • Fix corner case when tab prevents paragraph continuation in lists, #830.
vitaly
published 12.3.0 •

Changelog

Source

[12.3.0] - 2021-12-09

Changed

  • StateInline.delimiters[].jump is removed.

Fixed

  • Fixed quadratic complexity in pathological ***<10k stars>***a***<10k stars>*** case.
vitaly
published 12.2.0 •

Changelog

Source

[12.2.0] - 2021-08-02

Added

  • Ordered lists: add order value to token info.

Fixed

  • Always suffix indented code block with a newline, #799.
vitaly
published 12.1.0 •

Changelog

Source

[12.1.0] - 2021-07-01

Changed

  • Updated CM spec compatibility to 0.30.
2345
8Next
SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc