another clusterfuzz spotted issue (#15032)

zeripath · web-flow · commit c0c052bdbbb0 · 2021-03-18T22:37:11.000+01:00
Signed-off-by: Andrew Thornton &lt;art27@cantab.net&gt;
diff --git a/modules/markup/html.go b/modules/markup/html.go
@@ -313,7 +313,7 @@ func RenderEmoji(
 	return ctx.postProcess(rawHTML)
 }
 
-var tagCleaner = regexp.MustCompile(`<((?:/?\w+/\w+)|(?:/[\w ]+/)|(/?[hH][tT][mM][lL][ />]))`)
+var tagCleaner = regexp.MustCompile(`<((?:/?\w+/\w+)|(?:/[\w ]+/)|(/?[hH][tT][mM][lL][ />])|(/?[hH][eE][aA][dD][ />]))`)
 var nulCleaner = strings.NewReplacer("\000", "")
 
 func (ctx *postProcessCtx) postProcess(rawHTML []byte) ([]byte, error) {

Original file line number	Diff line number	Diff line change
`@@ -313,7 +313,7 @@ func RenderEmoji(`
`313`	`313`	`return ctx.postProcess(rawHTML)`
`314`	`314`	`}`
`315`	`315`
`316`		-var tagCleaner = regexp.MustCompile(`<((?:/?\w+/\w+)\|(?:/[\w ]+/)\|(/?[hH][tT][mM][lL][ />]))`)
	`316`	+var tagCleaner = regexp.MustCompile(`<((?:/?\w+/\w+)\|(?:/[\w ]+/)\|(/?[hH][tT][mM][lL][ />])\|(/?[hH][eE][aA][dD][ />]))`)
`317`	`317`	`var nulCleaner = strings.NewReplacer("\000", "")`
`318`	`318`
`319`	`319`	`func (ctx *postProcessCtx) postProcess(rawHTML []byte) ([]byte, error) {`