Skip to content

Cleanup dartdoc image marker handling and HTML sanitization - #9578

Merged
sigurdm merged 4 commits into
masterfrom
dartdoc-parsing-cleanup
Sep 15, 2026
Merged

sigurdm merged 4 commits into
masterfrom
dartdoc-parsing-cleanup

Conversation

@sigurdm

@sigurdm sigurdm commented Sep 14, 2026

Copy link
Copy Markdown
Contributor
  • Retains the image marker prefix through sanitization instead of stripping it via string replacement, and resolves it during page rendering.
  • Strips HTML comment nodes during sanitization.
  • Escapes substituted URLs in attribute context.
  • Bumps runtimeVersion to 2026.09.14 and drops 2026.08.13.

b/561399991

- Retain image marker prefix through sanitization instead of stripping it via string replacement, and resolve it during rendering.
- Escape substituted URLs in attribute context.
- Drop HTML comments during sanitization.
@sigurdm
sigurdm requested a review from isoos September 15, 2026 08:49
@sigurdm
sigurdm merged commit 85ca5ed into master Sep 15, 2026
31 checks passed
@sigurdm
sigurdm deleted the dartdoc-parsing-cleanup branch September 15, 2026 09:38
sigurdm added a commit that referenced this pull request Sep 15, 2026
* Cleanup dartdoc image marker handling and HTML sanitization

- Retain image marker prefix through sanitization instead of stripping it via string replacement, and resolve it during rendering.
- Escape substituted URLs in attribute context.
- Drop HTML comments during sanitization.

* Bump runtimeVersion to 2026.09.14

* Match the exact encodeComponent alphabet in the image marker pattern

* Update end2end task test goldens
sigurdm added a commit that referenced this pull request Sep 15, 2026
* feat: Redirect production downloads directly to primary host (#9572)

This simplifies the architecture. Instead of rewriting or signing
the GCS canonical buckets, this simply relies on Google Cloud
Load Balancer logic. If the user hits the service directly via AppEngine,
we redirect them to the canonical domain, which natively routes
via GCLB and serves the cached bucket.

* Enforce tar entry path normalization in pub_package_reader (#9579)

Reject non-normalized paths, redundant slashes, relative references (`.`, `./`, `..`),
and duplicate normalized entries in scanned package archives to ensure the archive
entries evaluated during validation match what downstream clients extract.

* Cleanup dartdoc image marker handling and HTML sanitization (#9578)

* Cleanup dartdoc image marker handling and HTML sanitization

- Retain image marker prefix through sanitization instead of stripping it via string replacement, and resolve it during rendering.
- Escape substituted URLs in attribute context.
- Drop HTML comments during sanitization.

* Bump runtimeVersion to 2026.09.14

* Match the exact encodeComponent alphabet in the image marker pattern

* Update end2end task test goldens
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants