| Age | Commit message (Collapse) | Author |
|
This vulnerability, discovered by Entroy C, allows users to write
arbitrary files to any location by feeding pandoc a specially crafted
URL in an image element. The vulnerability is serious for anyone
using pandoc to process untrusted input. The vulnerability does
not affect pandoc when run with the `--sandbox` flag.
|
|
Closes #8915.
|
|
|
|
- Updated Arch link (previous one was 404'ing)
- Standardised some other links that weren't pointing to the package or the distro-specific search results
|
|
This message will also be triggered when media is being
extracted to a temporary location, e.g. in PDF production.
|
|
Support for this (introduced in #6350) disappeared when we made an
architectural change.
|
|
Fix for this SO question: https://tex.stackexchange.com/questions/563778/how-to-get-f-syntax-highlighting
|
|
This wasn't implemented before due to an oversight. Closes #8908.
|
|
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 21 to 22.
- [Release notes](https://github.com/cachix/install-nix-action/releases)
- [Commits](https://github.com/cachix/install-nix-action/compare/v21...v22)
---
updated-dependencies:
- dependency-name: cachix/install-nix-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
|
|
|
Closes #8903.
|
|
|
|
Should fix the following error when running tests from Hackage tarball:
```
pandoc.mediabag: [WARNING] Could not fetch resource lua/module/sample.svg: replacing image with description
FAIL
fetch // populates media bag:
File lua/module/sample.svg not found in resource path
DEBUG:root:haskell-pandoc-lua-engine:
fill // populates media bag:
lua/module/pandoc-mediabag.lua:70:
expected values to be equal, got 'nil' and 'image/svg+xml'
```
|
|
Closes #8765.
|
|
Closes #8365.
|
|
Previously the reference title ended up in a separate
section at the back of the body instead of in the ref-list
in the back matter.
Closes #8364.
|
|
Closes #8794.
|
|
See #8702, which was only partially implemented before.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
New module Text.Pandoc.Readers.Typst [API change].
|
|
|
|
The transition to crypton is causing some problems.
|
|
Closes #8718.
|
|
|
|
Closes #8893.
|
|
Closes #8886.
|
|
|
|
This fixes a bug in RST documents that have anonymous links.
Closes #8877.
|
|
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 20 to 21.
- [Release notes](https://github.com/cachix/install-nix-action/releases)
- [Commits](https://github.com/cachix/install-nix-action/compare/v20...v21)
---
updated-dependencies:
- dependency-name: cachix/install-nix-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
|
|
|
Closes #8856.
In this case we don't want to try to parse the data at the URL.
Instead, create an image inside a div.
|
|
Remove old `.c` alias that mimics the JSON representation:
- Since 2.15ish, the lua structure no longer closely resembles that
JSON representation
- even if it did, introductory examples should be explicit. Using
an undocumented alias creates ambiguity.
|
|
|
|
|
|
|
|
We don't need the workarounds any more.
We no longer include pandoc-cli, pandoc-server, or pandoc-lua-engine
in the packages. Instead, add some of the heavier dependencies to
the list of build inputs.
This is at least a temporary solution to #8818.
|
|
|
|
Block-level formatting is not allowed inside .TL.
Closes #8835.
|
|
Improves on the last commit; closes #8831.
|
|
This should help with #8831. I'm not sure this is the
best solution, but it's certainly better than what we had before!
|
|
This commit introduces support for the Intense Quote in Docx Conversion.
Previously this was converted to a regular paragraph, but Intense Quote
should be interpreted as a Quote in conversion.
|
|
|
|
|
|
Note on how CommonMark's fenced divs differ.
|
|
The writer no longer searches the list of classes for a known programming
language but always uses the first class in that list as the language
identifier.
Closes: #8814
|