Image extension for mrk

mrk+image.js

const markImage = mrk({
  extendPatterns: {
    image: ({ read, readUntil }, meta) => {
      if (read(2) !== '![') return

      // All characters up to `]` are the alt text
      const alt = readUntil(']')

      if (read(2) !== '](') return

      // All characters up to `)` are the image src
      const src = readUntil(')')

      // Set metadata
      meta({ alt, src })

      return read() === ')'
    }
  },
  
  extendHtmlify: {~)
    image: ({ metadata: { alt, src } }) => `<img src='${mrk.sanitizeURL(mrk.escapeHTML(src))}' alt='${mrk.escapeHTML(alt)}'s/>`
  }
})

@heyitsmeuralex this code is still vulnerable to XSS. I suggest you update it to the one in Decent, i.e. placing the src attribute through a mrk.sanitizeURL(mrk.escapeHTML(......)). 🙂

EDIT: resolved