From 4c4a0e0f3fe9b4e33f2182f3f8e20d87736b371d Mon Sep 17 00:00:00 2001
From: Cheng-Han, Wu
Date: Thu, 11 Feb 2016 03:45:13 -0600
Subject: Fixed prevent XSS might break lots of tags and only need after
 rendered

---
 public/views/foot.ejs         | 1 +
 public/views/pretty.ejs       | 2 ++
 public/views/slide/reveal.hbs | 4 +++-
 3 files changed, 6 insertions(+), 1 deletion(-)

(limited to 'public/views')

diff --git a/public/views/foot.ejs b/public/views/foot.ejs
index 3a5ef145..dfb07ece 100644
--- a/public/views/foot.ejs
+++ b/public/views/foot.ejs
@@ -60,6 +60,7 @@
 <script type="text/javascript" src="//cdn.mathjax.org/mathjax/latest/MathJax.js?config=TeX-AMS-MML_HTMLorMML" defer></script>
 <script src="/js/common.js" defer></script>
 <script src="/js/extra.js" defer></script>
+<script src="/js/render.js" defer></script>
 <script src="/js/history.js" defer></script>
 <script src="/js/index.js" defer></script>
 <script src="/js/syncscroll.js" defer></script>
\ No newline at end of file
diff --git a/public/views/pretty.ejs b/public/views/pretty.ejs
index 07b0f7b2..998b2ef7 100644
--- a/public/views/pretty.ejs
+++ b/public/views/pretty.ejs
@@ -76,6 +76,7 @@
 <script src="<%- url %>/vendor/js-yaml/dist/js-yaml.min.js" defer></script>
 <% } %>
 <script src="<%- url %>/vendor/lz-string/libs/lz-string.min.js" defer></script>
+<script src="<%- url %>/vendor/xss/dist/xss.min.js" defer></script>
 <script src="<%- url %>/vendor/remarkable.min.js" defer></script>
 <script src="<%- url %>/vendor/remarkable-regex.js" defer></script>
 <script src="<%- url %>/vendor/gist-embed.js" defer></script>
@@ -94,4 +95,5 @@
 </script>
 <script type="text/javascript" src="//cdn.mathjax.org/mathjax/latest/MathJax.js?config=TeX-AMS-MML_HTMLorMML" defer></script>
 <script src="<%- url %>/js/extra.js" defer></script>
+<script src="<%- url %>/js/render.js" defer></script>
 <script src="<%- url %>/js/pretty.js" defer></script>
\ No newline at end of file
diff --git a/public/views/slide/reveal.hbs b/public/views/slide/reveal.hbs
index fd19f23c..fd87ddb3 100644
--- a/public/views/slide/reveal.hbs
+++ b/public/views/slide/reveal.hbs
@@ -31,6 +31,8 @@
         <script src="/vendor/reveal.js/lib/js/head.min.js"></script>
         <script src="/vendor/reveal.js/js/reveal.js"></script>
         <script src="/vendor/string.min.js"></script>
+        <script src="/vendor/xss/dist/xss.min.js"></script>
+        <script src="/js/render.js"></script>
 
         <script>
             var body = $(".slides").html();
@@ -53,7 +55,7 @@
             var deps = [
               { src: '/vendor/reveal.js/lib/js/classList.js', condition: function() { return !document.body.classList; } },
               { src: '/vendor/reveal.js/plugin/markdown/marked.js', condition: function() { return !!document.querySelector('[data-markdown]'); } },
-              { src: '/vendor/reveal.js/plugin/markdown/markdown.js', condition: function() { return !!document.querySelector('[data-markdown]'); } },
+              { src: '/js/reveal-markdown.js', condition: function() { return !!document.querySelector('[data-markdown]'); } },
               { src: '/vendor/reveal.js/plugin/highlight/highlight.js', async: true, callback: function() { hljs.initHighlightingOnLoad(); } },
               { src: '/vendor/reveal.js/plugin/notes/notes.js', async: true, condition: function() { return !!document.body.classList; } },
               { src: '/vendor/reveal.js/plugin/math/math.js', async: true }
-- 
cgit v1.2.3