another clusterfuzz spotted issue (#15032) (#15034)

6543 · zeripath · web-flow · commit 645c0d8abd53 · 2021-03-19T00:21:33.000+02:00
Signed-off-by: Andrew Thornton &lt;art27@cantab.net&gt;

Co-authored-by: zeripath &lt;art27@cantab.net&gt;
diff --git a/modules/markup/html.go b/modules/markup/html.go
@@ -298,7 +298,7 @@ func RenderEmoji(
 	return ctx.postProcess(rawHTML)
 }
 
-var tagCleaner = regexp.MustCompile(`<((?:/?\w+/\w+)|(?:/[\w ]+/)|(/?[hH][tT][mM][lL][ />]))`)
+var tagCleaner = regexp.MustCompile(`<((?:/?\w+/\w+)|(?:/[\w ]+/)|(/?[hH][tT][mM][lL][ />])|(/?[hH][eE][aA][dD][ />]))`)
 var nulCleaner = strings.NewReplacer("\000", "")
 
 func (ctx *postProcessCtx) postProcess(rawHTML []byte) ([]byte, error) {

Original file line number	Diff line number	Diff line change
`@@ -298,7 +298,7 @@ func RenderEmoji(`
`298`	`298`	`return ctx.postProcess(rawHTML)`
`299`	`299`	`}`
`300`	`300`
`301`		-var tagCleaner = regexp.MustCompile(`<((?:/?\w+/\w+)\|(?:/[\w ]+/)\|(/?[hH][tT][mM][lL][ />]))`)
	`301`	+var tagCleaner = regexp.MustCompile(`<((?:/?\w+/\w+)\|(?:/[\w ]+/)\|(/?[hH][tT][mM][lL][ />])\|(/?[hH][eE][aA][dD][ />]))`)
`302`	`302`	`var nulCleaner = strings.NewReplacer("\000", "")`
`303`	`303`
`304`	`304`	`func (ctx *postProcessCtx) postProcess(rawHTML []byte) ([]byte, error) {`