Socket
Socket
Sign inDemoInstall

markdown-to-jsx

Package Overview
Dependencies
Maintainers
1
Versions
110
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

markdown-to-jsx - npm Package Compare versions

Comparing version 3.1.0 to 3.1.1

18

CHANGELOG.md

@@ -0,1 +1,19 @@

### 3.1.1 (September 15, 2016)
Monkeypatched over a markdown syntax ambiguity that resulted in an exception when when a square-bracketed link without a shortcut identifier is encountered, e.g.
```md
Oh my god, look at [her butt].
```
According to [Daring Fireball markdown syntax](https://daringfireball.net/projects/markdown/syntax#link), a link reference may omit the shortcut identifier if it's desired to use the original text as the reference, but the empty square brackets still must be included, e.g.
```md
Oh my god, look at [her butt][].
[her butt]: https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=1&cad=rja&uact=8&ved=0ahUKEwjxjMnL2JLPAhXKQCYKHfFVAR0QyCkIITAA&url=https%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DLDZX4ooRsWs&usg=AFQjCNHb65jFtOPwGi7HZITW5qJ2PBlURA
```
---
### 3.1.0 (September 3, 2016)

@@ -2,0 +20,0 @@

12

index.es5.js

@@ -23,2 +23,6 @@ 'use strict';

var _lodash = require('lodash.get');
var _lodash2 = _interopRequireDefault(_lodash);
function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }

@@ -120,5 +124,5 @@

return _extends({}, props, {
title: definitions[ast.identifier].title,
title: (0, _lodash2.default)(definitions, '[\'' + ast.identifier + '\'].title'),
alt: ast.alt,
src: definitions[ast.identifier].url
src: (0, _lodash2.default)(definitions, '[\'' + ast.identifier + '\'].url')
});

@@ -134,4 +138,4 @@

return _extends({}, props, {
title: definitions[ast.identifier].title,
href: definitions[ast.identifier].url
title: (0, _lodash2.default)(definitions, '[\'' + ast.identifier + '\'].title'),
href: (0, _lodash2.default)(definitions, '[\'' + ast.identifier + '\'].url')
});

@@ -138,0 +142,0 @@

{
"name": "markdown-to-jsx",
"description": "Interprets markdown text and outputs a JSX equivalent.",
"homepage": "http://yaycmyk.com/markdown-to-jsx/",
"license": "MIT",
"version": "3.1.0",
"version": "3.1.1",
"engines": {

@@ -22,2 +23,3 @@ "node": ">= 4"

"devDependencies": {
"autoprefixer-stylus": "^0.10.0",
"babel-cli": "^6.14.0",

@@ -28,5 +30,16 @@ "babel-jest": "^15.0.0",

"babel-preset-stage-2": "^6.13.0",
"jest-cli": "^15.1.1"
"babelify": "^7.3.0",
"browserify": "^13.1.0",
"budo": "^9.2.0",
"bundle-collapser": "^1.2.1",
"codecov": "^1.0.1",
"jest-cli": "^15.1.1",
"react": "^15.3.1",
"react-dom": "^15.3.1",
"stylus": "^0.54.5",
"uglify-js": "^2.7.3",
"watchify": "^3.7.0"
},
"dependencies": {
"lodash.get": "^4.4.2",
"remark-parse": "^2.0.1",

@@ -48,4 +61,12 @@ "unified": "^5.0.0"

"es5": "babel index.js --out-file index.es5.js",
"site:css": "stylus -u autoprefixer-stylus site.styl -o docs/css/style.css",
"site:css:release": "npm run site:css -- -c",
"site:css:watch": "npm run site:css -- -w -m -l --sourcemap-inline",
"site:js": "browserify site.js -t babelify -p bundle-collapser/plugin",
"site:js:release": "NODE_ENV=production npm run -s site:js | uglifyjs -mc drop_console --screw-ie8 -o docs/js/bundle.js",
"site:js:watch": "budo site.js:js/bundle.js -d docs -H 0.0.0.0 --colors --live --open --pushstate --iw -- -t babelify",
"site:release": "npm run site:css:release && npm run site:js:release",
"start": "sh scripts/parallelize.sh \"npm run site:css:watch\" \"npm run site:js:watch\"",
"test": "jest --verbose"
}
}
# markdown to jsx converter
![build status](https://api.travis-ci.org/yaycmyk/markdown-to-jsx.svg)
![build status](https://api.travis-ci.org/yaycmyk/markdown-to-jsx.svg) [![codecov](https://codecov.io/gh/yaycmyk/markdown-to-jsx/branch/master/graph/badge.svg)](https://codecov.io/gh/yaycmyk/markdown-to-jsx)
Enables the safe parsing of markdown into proper React JSX objects, so you don't need to use a pattern like `dangerouslySetInnerHTML` and potentially open your application up to security issues.

@@ -6,0 +7,0 @@

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc