Adressing some Issues

[Merulast]

25 - Hardening against injections

22 - Single block Tags

[patorjk]

Looked good, thanks!

[termermc]

@Merulast Thank you for addressing this, however I did notice some issues with escapes in securityFixes.

function securityFixes(text) {
        return text
            .replaceAll("'", '"') // This should be ' (' is an XML entity, but is non-standard for HTML)
            .replaceAll('"', ''') // This should be " (it seems you swapped " and ' for eachother)
            .replaceAll(';', '&#59;');
    }

[Merulast]

@Merulast Thank you for addressing this, however I did notice some issues with escapes in securityFixes.

function securityFixes(text) {
        return text
            .replaceAll("'", '"') // This should be ' (' is an XML entity, but is non-standard for HTML)
            .replaceAll('"', ''') // This should be " (it seems you swapped " and ' for eachother)
            .replaceAll(';', '&#59;');
    }

you are absolute right. I dont know how this mistake happened. urgs.

[MichaelKaaden]

@Merulast The fix seems to has added a little problem, though.

var result = XBBCODE.process({
     text: "<h1>Hello World!</h1>",
 });
 console.error("Errors", result.error);
 console.dir(result.errorQueue);
 console.log(result.html);

now produces &lt&#59;h1&gt&#59;Hello World!&lt&#59;/h1&gt&#59; instead of <h1>Hello World!</h1>.

I prepared a PR to fix this: 31