hexojs / hexo-renderer-markdown-it / 25966263883

99%

push

github

fix: support markdown-it 14.x by avoiding internal module path (#223)

Replace `require('markdown-it/lib/token')` with
`md.core.State.prototype.Token` to access the Token class via the
public API. markdown-it 14.x converted internal files to ESM (.mjs),
breaking the direct `require()` of `lib/token`.

This also bumps the markdown-it dependency to ^14.1.1, which includes
a fix for CVE-2024-21535 (ReDoS in image reference parsing).

Closes #XXX

Co-authored-by: Uiolee <22849383+uiolee@users.noreply.github.com>
Co-authored-by: D-Sketon <2055272094@qq.com>

44 of 46 branches covered (95.65%)

Branch coverage included in aggregate %.

19 of 19 new or added lines in 1 file covered. (100.0%)

209 of 209 relevant lines covered (100.0%)

40.73 hits per line