diff --git a/go.mod b/go.mod index 7baa79d0..104470c1 100644 --- a/go.mod +++ b/go.mod @@ -11,6 +11,7 @@ require ( github.com/dlclark/regexp2 v1.11.5 github.com/docker/docker v28.3.3+incompatible github.com/docker/go-connections v0.6.0 + github.com/gomarkdown/markdown v0.0.0-20250810172220-2e2c11897d1a github.com/google/uuid v1.6.0 github.com/hashicorp/go-retryablehttp v0.7.8 github.com/labstack/echo/v4 v4.13.4 @@ -18,7 +19,6 @@ require ( github.com/mholt/archives v0.1.3 github.com/microcosm-cc/bluemonday v1.0.27 github.com/prometheus/client_golang v1.23.0 - github.com/russross/blackfriday/v2 v2.1.0 github.com/shirou/gopsutil/v4 v4.25.7 github.com/spf13/pflag v1.0.7 github.com/testcontainers/testcontainers-go v0.38.0 diff --git a/go.sum b/go.sum index 55b02111..ad9434e6 100644 --- a/go.sum +++ b/go.sum @@ -138,6 +138,8 @@ github.com/golang/protobuf v1.2.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5y github.com/golang/protobuf v1.3.1/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U= github.com/golang/protobuf v1.3.2/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U= github.com/golang/protobuf v1.3.3/go.mod h1:vzj43D7+SQXF/4pzW/hwtAqwc6iTitCiVSaWz5lYuqw= +github.com/gomarkdown/markdown v0.0.0-20250810172220-2e2c11897d1a h1:l7A0loSszR5zHd/qK53ZIHMO8b3bBSmENnQ6eKnUT0A= +github.com/gomarkdown/markdown v0.0.0-20250810172220-2e2c11897d1a/go.mod h1:JDGcbDT52eL4fju3sZ4TeHGsQwhG9nbDV21aMyhwPoA= github.com/google/btree v0.0.0-20180813153112-4030bb1f1f0c/go.mod h1:lNA+9X1NB3Zf8V7Ke586lFgjr2dZNuvo3lPJSGZ5JPQ= github.com/google/btree v1.0.0/go.mod h1:lNA+9X1NB3Zf8V7Ke586lFgjr2dZNuvo3lPJSGZ5JPQ= github.com/google/go-cmp v0.2.0/go.mod h1:oXzfMopK8JAjlY9xF4vHSVASa0yLyX7SntLO5aqRK0M= @@ -274,7 +276,6 @@ github.com/prometheus/procfs v0.17.0/go.mod h1:oPQLaDAMRbA+u8H5Pbfq+dl3VDAvHxMUO github.com/rogpeppe/go-internal v1.3.0/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFRclV5y23lUDJ4= github.com/rogpeppe/go-internal v1.13.1 h1:KvO1DLK/DRN07sQ1LQKScxyZJuNnedQ5/wKSR38lUII= github.com/rogpeppe/go-internal v1.13.1/go.mod h1:uMEvuHeurkdAXX61udpOXGD/AzZDWNMNyH2VO9fmH0o= -github.com/russross/blackfriday/v2 v2.1.0 h1:JIOH55/0cWyOuilr9/qlrm0BSXldqnqwMsf35Ld67mk= github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM= github.com/rwcarlsen/goexif v0.0.0-20190401172101-9e8deecbddbd/go.mod h1:hPqNNc0+uJM6H+SuU8sEs5K5IQeKccPqeSjfgcKGgPk= github.com/shirou/gopsutil/v4 v4.25.7 h1:bNb2JuqKuAu3tRlPv5piSmBZyMfecwQ+t/ILq+1JqVM= diff --git a/pkg/modules/chromium/routes.go b/pkg/modules/chromium/routes.go index ee9c2ca1..080837d1 100644 --- a/pkg/modules/chromium/routes.go +++ b/pkg/modules/chromium/routes.go @@ -14,9 +14,9 @@ import ( "time" "github.com/dlclark/regexp2" + "github.com/gomarkdown/markdown" "github.com/labstack/echo/v4" "github.com/microcosm-cc/bluemonday" - "github.com/russross/blackfriday/v2" "go.uber.org/multierr" "github.com/gotenberg/gotenberg/v8/pkg/gotenberg" @@ -561,7 +561,7 @@ func markdownToHtml(ctx *api.Context, inputPath string, markdownPaths []string) return "", fmt.Errorf("read markdown file '%s': %w", filename, err) } - unsafe := blackfriday.Run(b) + unsafe := markdown.ToHTML(b, nil, nil) sanitized := bluemonday.UGCPolicy().SanitizeBytes(unsafe) // #nosec