Commit Graph
15 Commits
Author SHA1 Message Date
Alois Klink 46a7a533ab fix: copy mermaid config sanitization check
Copy the XSS prevention check from the `sanitize` function in mermaid
upstream's `config.ts` file.

See: https://github.com/mermaid-js/mermaid/blob/9745f325cb9e1967640f0e85da193a2f820634f1/packages/mermaid/src/config.ts#L178-L183
2026-04-02 19:00:54 +09:00
Alois Klink 7e9cdfca73 fix: sanitize all secure keys in config
Check and remove all the secure keys in the site Mermaid Config,
not just `securityLevel`. Unfortunately, the logic of Mermaid's
`sanitize` function in `config.ts` is a bit convoluted. For instance,
the `secure` config restricts keys deeply in the object.

See: https://github.com/mermaid-js/mermaid/blob/9745f325cb9e1967640f0e85da193a2f820634f1/packages/mermaid/src/config.ts#L155-L190
2026-04-02 19:00:54 +09:00
Alois Klink 48b9560e8e fix: sanitize config loaded from gist/config URL
Currently, the `config` in the codeState in the hash is sanitized for
unsafe values, however the `?config` URL parameter or configs loaded
from a GitHub Gist are not.

Reported-by: Chai Cheng Xun @QiaoNPC
2026-04-02 18:59:09 +09:00
Sidharth Vinod 5cc29dfebe tests: Tweak failing tests 2026-03-04 00:32:16 +05:30
Sidharth Vinod dabbf5700a test: Disable popup in tests 2026-03-03 23:45:51 +05:30
Sidharth Vinod d991139b0a chore: Update eslint 2025-09-03 01:41:51 +05:30
Sidharth Vinod 75126f180d test: Update svg size 2025-08-20 11:47:59 +05:30
Sidharth Vinod cc308b81c9 test: Update size to match new diagram 2025-08-04 12:45:26 +05:30
Sidharth Vinod 1a2d752ca4 test: Update diagram names 2025-08-02 19:29:46 +05:30
Sidharth VinodandAlois Klink 400f3ecf95 fix: Hide AI Repair button in config tab
Co-authored-by: Alois Klink <alois@aloisklink.com>
2025-05-26 23:14:45 +05:30
Sidharth Vinod 1f702e4960 fix: Update download image size to match CI 2025-04-02 14:24:58 +05:30
Sidharth Vinod 64e156085b test: Fix tests 2025-03-19 19:54:42 -07:00
Sidharth Vinod 501c983b99 test: Fix tests 2025-03-19 19:10:51 -07:00
Sidharth Vinod 324dd0b4b2 chore: Remove cypress 2025-03-17 21:27:33 -07:00
Sidharth Vinod bb084867fa chore: Add playwright tests 2025-03-17 19:47:13 -07:00