Security News
Input Validation Vulnerabilities Dominate MITRE's 2024 CWE Top 25 List
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
remark-vdom
Advanced tools
remark plugin to compile Markdown to Virtual DOM.
MyLink
instead of
<a>
)npm:
npm install remark-vdom
Say we have the following file, example.js
:
var unified = require('unified')
var markdown = require('remark-parse')
var vdom = require('remark-vdom')
unified()
.use(markdown)
.use(vdom)
.process('Some _emphasis_, **importance**, and `code`.', function(err, file) {
if (err) throw err
console.dir(file.result, {depth: null})
})
Now, running node example
yields:
VirtualNode {
tagName: 'DIV',
properties: { key: undefined },
children: [
VirtualNode {
tagName: 'P',
properties: { key: undefined },
children: [
VirtualText { text: 'Some ' },
VirtualNode {
tagName: 'EM',
properties: { key: undefined },
children: [ VirtualText { text: 'emphasis' } ],
key: 'h-3',
namespace: null,
count: 1,
hasWidgets: false,
hasThunks: false,
hooks: undefined,
descendantHooks: false
},
VirtualText { text: ', ' },
VirtualNode {
tagName: 'STRONG',
properties: { key: undefined },
children: [ VirtualText { text: 'importance' } ],
key: 'h-4',
namespace: null,
count: 1,
hasWidgets: false,
hasThunks: false,
hooks: undefined,
descendantHooks: false
},
VirtualText { text: ', and ' },
VirtualNode {
tagName: 'CODE',
properties: { key: undefined },
children: [ VirtualText { text: 'code' } ],
key: 'h-5',
namespace: null,
count: 1,
hasWidgets: false,
hasThunks: false,
hooks: undefined,
descendantHooks: false
},
VirtualText { text: '.' }
],
key: 'h-2',
namespace: null,
count: 10,
hasWidgets: false,
hasThunks: false,
hooks: undefined,
descendantHooks: false
}
],
key: 'h-1',
namespace: null,
count: 11,
hasWidgets: false,
hasThunks: false,
hooks: undefined,
descendantHooks: false
}
remark().use(vdom[, options])
Compile Markdown to Virtual DOM.
ℹ️ In
unified@9.0.0
, the result of.process
changed fromtofile.contents
file.result
.
options
options.sanitize
How to sanitize the output (Object
or boolean
, default: null
).
Sanitation is done by hast-util-sanitize
, except when false
is
given.
If an object is passed in, it’s given as a schema to sanitize
.
By default, input is sanitized according to GitHub’s sanitation rules.
Embedded HTML is always stripped.
For example, by default className
s are stripped.
To keep them in, use something like:
var merge = require('deepmerge')
var gh = require('hast-util-sanitize/lib/github')
var schema = merge(gh, {attributes: {'*': ['className']}})
var vtree = remark()
.use(vdom, {sanitize: schema})
.processSync(/* ... */)
options.prefix
Optimization hint (string
, default: h-
).
options.h
Hyperscript to use (Function
, default: require('virtual-dom/h')
).
options.components
Map of tag names to custom components (Object.<Function>
, optional).
That component is invoked with tagName
, props
, and children
.
It can return any VDOM compatible value (such as VNode
, VText
, Widget
).
For example:
var components = {code: code}
function code(tagName, props, children) {
// Ensure a default programming language is set.
if (!props.className) {
props.className = 'language-js'
}
return h(tagName, props, children)
}
Integrates with the same tools as remark-html
.
Use of remark-vdom
is safe by default, but changing the sanitize
option
can open you up to a cross-site scripting (XSS) attack if the tree is
unsafe.
remark-rehype
— Properly transform to an HTML virtual DOM (hast)rehype-react
— Transform hast to Reactremark-react
— Compile markdown to Reactremark-man
— Compile to man pagesremark-html
— Compile to HTMLSee contributing.md
in remarkjs/.github
for ways
to get started.
See support.md
for ways to get help.
This project has a code of conduct. By interacting with this repository, organization, or community you agree to abide by its terms.
FAQs
Deprecated: this package was not used enough to warrant continued maintenance.
The npm package remark-vdom receives a total of 2,327 weekly downloads. As such, remark-vdom popularity was classified as popular.
We found that remark-vdom demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.