qiita-markdown 0.23.0 → 0.28.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA1:
-  metadata.gz: 16c43409c5b2bdceefb568344cf9280e7d1e50b2
-  data.tar.gz: f4225f554071f1e8c8c339248f08b3ef5253be46
+SHA256:
+  metadata.gz: db1f661355f65d7ca159db9a954a74002a39cb996e573aa483384edf7fb6f68c
+  data.tar.gz: b2e6bce2f3f66af7e5238515e4f082abeedf86b90b886aacaa8ce45b7655e942
 SHA512:
-  metadata.gz: 5a9edc2d4826bfefd294ad32cf556fbb6985ac94d4e91a435a9513f6aec51c1a58bc435eebd45350e275ad1e5314c188c0e56bd3d56bc6130d9fcbe18f72ba6e
-  data.tar.gz: 2da9ab1ee70db812a391875522e53606991f177d1f66b7da80192b9db1bbda9cc83d101cb6b01fd292c6dc405b35ccac4cc01a694d7f872b9e7ae5b01bc19155
+  metadata.gz: 9784da7558dbe61bcc6f4e3e923c3286f4954c9632b892997c3816b1e366844420cd8280ae432b8a6a85ec3dff543dd31aaf2690f6b2ed20ae862f9d756fb74c
+  data.tar.gz: d1c1920577d61ba16cec374c16feaa9804e862b61e2653dfe99470b9832c66dc3d6c4969a8559b718bc3e0adf85b5e55aeb35604b01909a3c93b558a816e11e3

data/CHANGELOG.md

@@ -1,5 +1,26 @@
 ## Unreleased
 
+## 0.28.0
+
+- Accept new codepen script url (cpwebassets.codepen.io)
+
+## 0.27.0
+
+- Support embed Asciinema
+
+## 0.26.0
+
+- Use greenmat 3.2.2.4
+
+## 0.25.0
+
+- Accept new codepen script url (static.codepen.io)
+
+## 0.24.0
+
+- Fix to strip HTML tags in ToC
+- Allow to use data-\* attributes when embedding Tweet and CodePen
+
 ## 0.23.0
 
 - Support embed Tweet

data/lib/qiita/markdown.rb

@@ -9,6 +9,7 @@ require "sanitize"
 
 require "qiita/markdown/embed/code_pen"
 require "qiita/markdown/embed/tweet"
+require "qiita/markdown/embed/asciinema"
 require "qiita/markdown/transformers/filter_attributes"
 require "qiita/markdown/transformers/filter_script"
 require "qiita/markdown/transformers/strip_invalid_node"

data/lib/qiita/markdown/embed/asciinema.rb

@@ -0,0 +1,9 @@
+module Qiita
+  module Markdown
+    module Embed
+      module Asciinema
+        SCRIPT_HOST = "asciinema.org".freeze
+      end
+    end
+  end
+end

data/lib/qiita/markdown/embed/code_pen.rb

@@ -2,8 +2,20 @@ module Qiita
   module Markdown
     module Embed
       module CodePen
-        SCRIPT_URL = "https://production-assets.codepen.io/assets/embed/ei.js"
-        ATTRIBUTES = %w[class data-embed-version data-slug-hash]
+        SCRIPT_URLS = [
+          "https://production-assets.codepen.io/assets/embed/ei.js",
+          "https://static.codepen.io/assets/embed/ei.js",
+          "https://cpwebassets.codepen.io/assets/embed/ei.js",
+        ]
+        CLASS_NAME = %w[codepen]
+        DATA_ATTRIBUTES = %w[
+          data-active-link-color data-active-tab-color data-animations data-border
+          data-border-color data-class data-custom-css-url data-default-tab
+          data-embed-version data-height data-link-logo-color data-pen-title
+          data-preview data-rerun-position data-show-tab-bar data-slug-hash
+          data-tab-bar-color data-tab-link-color data-theme-id data-user
+        ]
+        ATTRIBUTES = %w[class] + DATA_ATTRIBUTES
       end
     end
   end

data/lib/qiita/markdown/embed/tweet.rb

@@ -4,6 +4,11 @@ module Qiita
       module Tweet
         SCRIPT_URL = "https://platform.twitter.com/widgets.js"
         CLASS_NAME = %w[twitter-tweet]
+        DATA_ATTRIBUTES = %w[
+          data-align data-cards data-conversation data-dnt
+          data-id data-lang data-link-color data-theme data-width
+        ]
+        ATTRIBUTES = %w[class] + DATA_ATTRIBUTES
       end
     end
   end

data/lib/qiita/markdown/filters/final_sanitizer.rb

@@ -18,6 +18,7 @@ module Qiita
               "href",
               "rel",
             ],
+            "blockquote" => Embed::Tweet::ATTRIBUTES,
             "iframe" => [
               "allowfullscreen",
               "frameborder",

data/lib/qiita/markdown/filters/user_input_sanitizer.rb

@@ -11,7 +11,7 @@ module Qiita
           ],
           attributes: {
             "a"          => %w[class href rel title],
-            "blockquote" => %w[cite class],
+            "blockquote" => %w[cite] + Embed::Tweet::ATTRIBUTES,
             "code"       => %w[data-metadata],
             "div"        => %w[class],
             "font"       => %w[color],
@@ -26,7 +26,7 @@ module Qiita
             "li"         => %w[id],
             "p"          => Embed::CodePen::ATTRIBUTES,
             "q"          => %w[cite],
-            "script"     => %w[async src],
+            "script"     => %w[async src id],
             "sup"        => %w[id],
             "td"         => %w[colspan rowspan style],
             "th"         => %w[colspan rowspan style],

data/lib/qiita/markdown/greenmat/html_toc_renderer.rb

@@ -65,6 +65,12 @@ module Qiita
           def increment
             counter[id] += 1
           end
+
+          private
+
+          def body
+            escape_html? ? CGI.escape_html(text) : raw_body
+          end
         end
       end
     end

data/lib/qiita/markdown/transformers/filter_attributes.rb

@@ -15,7 +15,7 @@ module Qiita
             "class" => %w[footnotes],
           },
           "p" => {
-            "class" => %w[codepen],
+            "class" => Embed::CodePen::CLASS_NAME,
           },
           "sup" => {
             "id" => /\Afnref\d+\z/,

data/lib/qiita/markdown/transformers/filter_script.rb

@@ -2,10 +2,14 @@ module Qiita
   module Markdown
     module Transformers
       class FilterScript
-        WHITE_LIST = [
-          Embed::CodePen::SCRIPT_URL,
+        URL_WHITE_LIST = [
+          Embed::CodePen::SCRIPT_URLS,
           Embed::Tweet::SCRIPT_URL,
-        ].freeze
+        ].flatten.freeze
+
+        HOST_WHITE_LIST = [
+          Embed::Asciinema::SCRIPT_HOST,
+        ].flatten.freeze
 
         def self.call(*args)
           new(*args).transform
@@ -17,7 +21,7 @@ module Qiita
 
         def transform
           if name == "script"
-            if WHITE_LIST.include?(node["src"])
+            if URL_WHITE_LIST.include?(node["src"]) || HOST_WHITE_LIST.include?(host_of(node["src"]))
               node["async"] = "async" unless node.attributes.key?("async")
               node.children.unlink
             else
@@ -35,6 +39,12 @@ module Qiita
         def node
           @env[:node]
         end
+
+        def host_of(url)
+          Addressable::URI.parse(url).host if url
+        rescue Addressable::URI::InvalidURIError
+          nil
+        end
       end
     end
   end

data/lib/qiita/markdown/version.rb

@@ -1,5 +1,5 @@
 module Qiita
   module Markdown
-    VERSION = "0.23.0"
+    VERSION = "0.28.0"
   end
 end

data/qiita-markdown.gemspec

@@ -23,12 +23,12 @@ Gem::Specification.new do |spec|
   spec.add_dependency "html-pipeline", "~> 2.0"
   spec.add_dependency "mem"
   spec.add_dependency "pygments.rb", "~> 1.0"
-  spec.add_dependency "greenmat", "3.2.2.3"
+  spec.add_dependency "greenmat", "3.2.2.4"
   spec.add_dependency "sanitize"
   spec.add_dependency "addressable"
   spec.add_development_dependency "activesupport", "4.2.6"
   spec.add_development_dependency "benchmark-ips", "~> 1.2"
-  spec.add_development_dependency "bundler", "~> 1.7"
+  spec.add_development_dependency "bundler"
   spec.add_development_dependency "codeclimate-test-reporter", "0.4.4"
   spec.add_development_dependency "pry"
   spec.add_development_dependency "rake", "~> 10.0"

data/spec/qiita/markdown/greenmat/html_toc_renderer_spec.rb

@@ -117,20 +117,40 @@ describe Qiita::Markdown::Greenmat::HTMLToCRenderer do
   context "with :escape_html extension" do
     let(:extension) { { escape_html: true } }
 
-    let(:markdown) do
-      <<-EOS.strip_heredoc
-        # <b>R&amp;B</b>
-      EOS
+    context "with heading title including HTML tags" do
+      let(:markdown) do
+        <<-EOS.strip_heredoc
+          # <b>R&amp;B</b>
+        EOS
+      end
+
+      it "strips HTML characters in heading title" do
+        should eq <<-EOS.strip_heredoc
+          <ul>
+          <li>
+          <a href="#rb">R&amp;B</a>
+          </li>
+          </ul>
+        EOS
+      end
     end
 
-    it "escapes special HTML characters in heading title" do
-      should eq <<-EOS.strip_heredoc
-        <ul>
-        <li>
-        <a href="#rb">&lt;b&gt;R&amp;amp;B&lt;/b&gt;</a>
-        </li>
-        </ul>
-      EOS
+    context "with heading title including HTML tags inside of code" do
+      let(:markdown) do
+        <<-EOS.strip_heredoc
+          # `<div>`
+        EOS
+      end
+
+      it "escapes HTML tags inside of code" do
+        should eq <<-EOS.strip_heredoc
+          <ul>
+          <li>
+          <a href="#div">&lt;div&gt;</a>
+          </li>
+          </ul>
+        EOS
+      end
     end
   end
 end

data/spec/qiita/markdown/processor_spec.rb

@@ -21,9 +21,9 @@ describe Qiita::Markdown::Processor do
     shared_examples_for "basic markdown syntax" do
       context "with valid condition" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             example
-          EOS
+          MARKDOWN
         end
 
         it "returns a Hash with HTML output and other metadata" do
@@ -39,9 +39,9 @@ describe Qiita::Markdown::Processor do
         end
 
         it "sanitizes them" do
-          should eq <<-EOS.strip_heredoc
+          should eq <<-HTML.strip_heredoc
             <p>&lt;&gt;&amp;</p>
-          EOS
+          HTML
         end
       end
 
@@ -51,24 +51,24 @@ describe Qiita::Markdown::Processor do
         end
 
         it "replaces with mailto link" do
-          should eq <<-EOS.strip_heredoc
+          should eq <<-HTML.strip_heredoc
             <p><a href="mailto:test@example.com" class="autolink">test@example.com</a></p>
-          EOS
+          HTML
         end
       end
 
       context "with headings" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             # a
             ## a
             ### a
             ### a
-          EOS
+          MARKDOWN
         end
 
         it "adds ID for ToC" do
-          should eq <<-EOS.strip_heredoc
+          should eq <<-HTML.strip_heredoc
 
             <h1>
             <span id="a" class="fragment"></span><a href="#a"><i class="fa fa-link"></i></a>a</h1>
@@ -81,48 +81,48 @@ describe Qiita::Markdown::Processor do
 
             <h3>
             <span id="a-3" class="fragment"></span><a href="#a-3"><i class="fa fa-link"></i></a>a</h3>
-          EOS
+          HTML
         end
       end
 
       context "with heading whose title includes special HTML characters" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             # <b>R&amp;B</b>
-          EOS
+          MARKDOWN
         end
 
         it "generates fragment identifier by sanitizing the special characters in the title" do
-          should eq <<-EOS.strip_heredoc
+          should eq <<-HTML.strip_heredoc
 
             <h1>
             <span id="rb" class="fragment"></span><a href="#rb"><i class="fa fa-link"></i></a><b>R&amp;B</b>
             </h1>
-          EOS
+          HTML
         end
       end
 
       context "with manually inputted heading HTML tags without id attribute" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             <h1>foo</h1>
-          EOS
+          MARKDOWN
         end
 
         it "does nothing" do
-          should eq <<-EOS.strip_heredoc
+          should eq <<-HTML.strip_heredoc
             <h1>foo</h1>
-          EOS
+          HTML
         end
       end
 
       context "with code" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             ```foo.rb
             puts 'hello world'
             ```
-          EOS
+          MARKDOWN
         end
 
         it "returns detected codes" do
@@ -138,68 +138,68 @@ describe Qiita::Markdown::Processor do
 
       context "with code & filename" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             ```example.rb
             1
             ```
-          EOS
+          MARKDOWN
         end
 
         it "returns code-frame, code-lang, and highlighted pre element" do
-          should eq <<-EOS.strip_heredoc
+          should eq <<-HTML.strip_heredoc
             <div class="code-frame" data-lang="ruby">
             <div class="code-lang"><span class="bold">example.rb</span></div>
             <div class="highlight"><pre><span></span><span class="mi">1</span>
             </pre></div>
             </div>
-          EOS
+          HTML
         end
       end
 
       context "with code & filename with .php" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             ```example.php
             1
             ```
-          EOS
+          MARKDOWN
         end
 
         it "returns PHP code-frame" do
-          should eq <<-EOS.strip_heredoc
+          should eq <<-HTML.strip_heredoc
             <div class="code-frame" data-lang="php">
             <div class="code-lang"><span class="bold">example.php</span></div>
             <div class="highlight"><pre><span></span><span class="mi">1</span>
             </pre></div>
             </div>
-          EOS
+          HTML
         end
       end
 
       context "with code & no filename" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             ```ruby
             1
             ```
-          EOS
+          MARKDOWN
         end
 
         it "returns code-frame and highlighted pre element" do
-          should eq <<-EOS.strip_heredoc
+          should eq <<-HTML.strip_heredoc
             <div class="code-frame" data-lang="ruby"><div class="highlight"><pre><span></span><span class="mi">1</span>
             </pre></div></div>
-          EOS
+          HTML
         end
       end
 
       context "with undefined but aliased language" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             ```zsh
             true
             ```
-          EOS
+          MARKDOWN
         end
 
         it "returns aliased language name" do
@@ -215,22 +215,22 @@ describe Qiita::Markdown::Processor do
 
       context "with code with leading and trailing newlines" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             ```
 
             foo
 
             ```
-          EOS
+          MARKDOWN
         end
 
         it "does not strip the newlines" do
-          should eq <<-EOS.strip_heredoc
+          should eq <<-HTML.strip_heredoc
             <div class="code-frame" data-lang="text"><div class="highlight"><pre><span></span>
             foo
 
             </pre></div></div>
-           EOS
+           HTML
         end
       end
 
@@ -240,9 +240,9 @@ describe Qiita::Markdown::Processor do
         end
 
         it "replaces mention with link" do
-          should include(<<-EOS.strip_heredoc.rstrip)
+          should include(<<-HTML.strip_heredoc.rstrip)
             <a href="/alice" class="user-mention js-hovercard" title="alice" data-hovercard-target-type="user" data-hovercard-target-name="alice">@alice</a>
-          EOS
+          HTML
         end
       end
 
@@ -252,15 +252,15 @@ describe Qiita::Markdown::Processor do
         end
 
         it "replaces mention with link" do
-          should include(<<-EOS.strip_heredoc.rstrip)
+          should include(<<-HTML.strip_heredoc.rstrip)
             <a href="/al" class="user-mention js-hovercard" title="al" data-hovercard-target-type="user" data-hovercard-target-name="al">@al</a>
-          EOS
+          HTML
         end
       end
 
       context "with mentions in complex patterns" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             @alice
 
             ```
@@ -280,7 +280,7 @@ describe Qiita::Markdown::Processor do
             @-o
             @o_
             @_o
-          EOS
+          MARKDOWN
         end
 
         it "extracts mentions correctly" do
@@ -300,21 +300,21 @@ describe Qiita::Markdown::Processor do
 
       context "with mention-like filename on code block" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             ```ruby:@alice
             1
             ```
-          EOS
+          MARKDOWN
         end
 
         it "does not treat it as mention" do
-          should include(<<-EOS.strip_heredoc.rstrip)
+          should include(<<-HTML.strip_heredoc.rstrip)
             <div class="code-frame" data-lang="ruby">
             <div class="code-lang"><span class="bold">@alice</span></div>
             <div class="highlight"><pre><span></span><span class="mi">1</span>
             </pre></div>
             </div>
-          EOS
+          HTML
         end
       end
 
@@ -324,11 +324,11 @@ describe Qiita::Markdown::Processor do
         end
 
         it "does not replace mention with link" do
-          should include(<<-EOS.strip_heredoc.rstrip)
+          should include(<<-HTML.strip_heredoc.rstrip)
             <blockquote>
             <p>@alice</p>
             </blockquote>
-          EOS
+          HTML
         end
       end
 
@@ -338,9 +338,9 @@ describe Qiita::Markdown::Processor do
         end
 
         it "does not emphasize the name" do
-          should include(<<-EOS.strip_heredoc.rstrip)
+          should include(<<-HTML.strip_heredoc.rstrip)
             <a href="/_alice_" class="user-mention js-hovercard" title="_alice_" data-hovercard-target-type="user" data-hovercard-target-name="_alice_">@_alice_</a>
-          EOS
+          HTML
         end
       end
 
@@ -350,10 +350,10 @@ describe Qiita::Markdown::Processor do
         end
 
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             @alice
             @bob
-          EOS
+          MARKDOWN
         end
 
         it "limits mentions to allowed usernames" do
@@ -371,9 +371,9 @@ describe Qiita::Markdown::Processor do
         end
 
         it "links it and reports all allowed users as mentioned user names" do
-          should include(<<-EOS.strip_heredoc.rstrip)
+          should include(<<-HTML.strip_heredoc.rstrip)
             <a href="/" class="user-mention" title="all">@all</a>
-          EOS
+          HTML
           expect(result[:mentioned_usernames]).to eq context[:allowed_usernames]
         end
       end
@@ -409,9 +409,9 @@ describe Qiita::Markdown::Processor do
         end
 
         it "does not replace it" do
-          is_expected.to eq <<-EOS.strip_heredoc
+          is_expected.to eq <<-HTML.strip_heredoc
             <p>@alice/bob</p>
-          EOS
+          HTML
         end
       end
 
@@ -427,9 +427,9 @@ describe Qiita::Markdown::Processor do
         end
 
         it "replaces it with preferred link and updates :mentioned_groups" do
-          is_expected.to eq <<-EOS.strip_heredoc
+          is_expected.to eq <<-HTML.strip_heredoc
             <p><a href="https://alice.example.com/groups/bob" rel="nofollow noopener" target="_blank">@alice/bob</a></p>
-          EOS
+          HTML
           expect(result[:mentioned_groups]).to eq [{
             group_url_name: "bob",
             team_url_name: "alice",
@@ -459,9 +459,9 @@ describe Qiita::Markdown::Processor do
         end
 
         it "creates link for that" do
-          should eq <<-EOS.strip_heredoc
+          should eq <<-HTML.strip_heredoc
             <p><a href="/example"></a></p>
-          EOS
+          HTML
         end
       end
 
@@ -471,9 +471,9 @@ describe Qiita::Markdown::Processor do
         end
 
         it "creates link for that" do
-          should eq <<-EOS.strip_heredoc
+          should eq <<-HTML.strip_heredoc
             <p><a href="#example"></a></p>
-          EOS
+          HTML
         end
       end
 
@@ -483,9 +483,9 @@ describe Qiita::Markdown::Processor do
         end
 
         it "creates link for that with the title" do
-          should eq <<-EOS.strip_heredoc
+          should eq <<-HTML.strip_heredoc
             <p><a href="/example" title="Title"></a></p>
-          EOS
+          HTML
         end
       end
 
@@ -508,9 +508,9 @@ describe Qiita::Markdown::Processor do
         end
 
         it "removes that link by creating empty a element" do
-          should eq <<-EOS.strip_heredoc
+          should eq <<-HTML.strip_heredoc
             <p><a></a></p>
-          EOS
+          HTML
         end
       end
 
@@ -526,11 +526,11 @@ describe Qiita::Markdown::Processor do
 
       context "with emoji in pre or code element" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             ```
             :+1:
             ```
-          EOS
+          MARKDOWN
         end
 
         it "does not replace it" do
@@ -573,11 +573,11 @@ describe Qiita::Markdown::Processor do
 
       context "with colon-only label" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             ```:
             1
             ```
-          EOS
+          MARKDOWN
         end
 
         it "does not replace it" do
@@ -597,42 +597,42 @@ describe Qiita::Markdown::Processor do
         end
 
         it "allows font element with color attribute" do
-          should eq <<-EOS.strip_heredoc
+          should eq <<-HTML.strip_heredoc
             <p>#{markdown}</p>
-          EOS
+          HTML
         end
       end
 
       context "with task list" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             - [ ] a
             - [x] b
-          EOS
+          MARKDOWN
         end
 
         it "inserts checkbox" do
-          should eq <<-EOS.strip_heredoc
+          should eq <<-HTML.strip_heredoc
             <ul>
             <li class="task-list-item">
             <input type="checkbox" class="task-list-item-checkbox" disabled>a</li>
             <li class="task-list-item">
             <input type="checkbox" class="task-list-item-checkbox" checked disabled>b</li>
             </ul>
-          EOS
+          HTML
         end
       end
 
       context "with nested task list" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             - [ ] a
              - [ ] b
-          EOS
+          MARKDOWN
         end
 
         it "inserts checkbox" do
-          should eq <<-EOS.strip_heredoc
+          should eq <<-HTML.strip_heredoc
             <ul>
             <li class="task-list-item">
             <input type="checkbox" class="task-list-item-checkbox" disabled>a
@@ -643,45 +643,45 @@ describe Qiita::Markdown::Processor do
             </ul>
             </li>
             </ul>
-          EOS
+          HTML
         end
       end
 
       context "with task list in code block" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             ```
             - [ ] a
             - [x] b
             ```
-          EOS
+          MARKDOWN
         end
 
         it "does not replace checkbox" do
-          should eq <<-EOS.strip_heredoc
+          should eq <<-HTML.strip_heredoc
             <div class="code-frame" data-lang="text"><div class="highlight"><pre><span></span>- [ ] a
             - [x] b
             </pre></div></div>
-          EOS
+          HTML
         end
       end
 
       context "with empty line between task list" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             - [ ] a
 
             - [x] b
-          EOS
+          MARKDOWN
         end
 
         it "inserts checkbox" do
-          should eq <<-EOS.strip_heredoc
+          should eq <<-HTML.strip_heredoc
             <ul>
             <li class="task-list-item"><p><input type="checkbox" class="task-list-item-checkbox" disabled>a</p></li>
             <li class="task-list-item"><p><input type="checkbox" class="task-list-item-checkbox" checked disabled>b</p></li>
             </ul>
-          EOS
+          HTML
         end
       end
 
@@ -691,25 +691,25 @@ describe Qiita::Markdown::Processor do
         end
 
         it "inserts checkbox" do
-          should eq <<-EOS.strip_heredoc
+          should eq <<-HTML.strip_heredoc
             <ul>
             <li>
             </ul>
-          EOS
+          HTML
         end
       end
 
       context "with text-aligned table" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             | a  | b  | c   |
             |:---|---:|:---:|
             | a  | b  | c   |
-          EOS
+          MARKDOWN
         end
 
         it "creates table element with text-align style" do
-          should eq <<-EOS.strip_heredoc
+          should eq <<-HTML.strip_heredoc
             <table>
             <thead>
             <tr>
@@ -726,20 +726,20 @@ describe Qiita::Markdown::Processor do
             </tr>
             </tbody>
             </table>
-          EOS
+          HTML
         end
       end
 
       context "with footenotes syntax" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             [^1]
             [^1]: test
-          EOS
+          MARKDOWN
         end
 
         it "generates footnotes elements" do
-          should eq <<-EOS.strip_heredoc
+          should eq <<-HTML.strip_heredoc
             <p><sup id="fnref1"><a href="#fn1" rel="footnote" title="test">1</a></sup></p>
 
             <div class="footnotes">
@@ -752,35 +752,35 @@ describe Qiita::Markdown::Processor do
 
             </ol>
             </div>
-          EOS
+          HTML
         end
       end
 
       context "with manually written link inside of <sup> tag" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             <sup>[Example](http://example.com/)</sup>
-          EOS
+          MARKDOWN
         end
 
         it "does not confuse the structure with automatically generated footnote reference" do
-          should eq <<-EOS.strip_heredoc
+          should eq <<-HTML.strip_heredoc
             <p><sup><a href="http://example.com/">Example</a></sup></p>
-          EOS
+          HTML
         end
       end
 
       context "with manually written <a> tag with strange href inside of <sup> tag" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             <sup><a href="#foo.1">Link</a></sup>
-          EOS
+          MARKDOWN
         end
 
         it "does not confuse the structure with automatically generated footnote reference" do
-          should eq <<-EOS.strip_heredoc
+          should eq <<-HTML.strip_heredoc
             <p><sup><a href="#foo.1">Link</a></sup></p>
-          EOS
+          HTML
         end
       end
 
@@ -790,16 +790,16 @@ describe Qiita::Markdown::Processor do
         end
 
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             [^1]
             [^1]: test
-          EOS
+          MARKDOWN
         end
 
         it "does not generate footnote elements" do
-          should eq <<-EOS.strip_heredoc
+          should eq <<-HTML.strip_heredoc
             <p><a href="test">^1</a></p>
-          EOS
+          HTML
         end
       end
 
@@ -813,9 +813,9 @@ describe Qiita::Markdown::Processor do
         end
 
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             :foo: :o: :x:
-          EOS
+          MARKDOWN
         end
 
         it "replaces only the specified emoji names with img elements with custom URL" do
@@ -1036,9 +1036,9 @@ describe Qiita::Markdown::Processor do
     shared_examples_for "script element" do |allowed:|
       context "with script element" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             <script>alert(1)</script>
-          EOS
+          MARKDOWN
         end
 
         if allowed
@@ -1048,9 +1048,9 @@ describe Qiita::Markdown::Processor do
 
           context "and allowed attributes" do
             let(:markdown) do
-              <<-EOS.strip_heredoc
+              <<-MARKDOWN.strip_heredoc
                 <p><script async data-a="b" type="text/javascript">alert(1)</script></p>
-              EOS
+              MARKDOWN
             end
 
             it "allows data-attributes" do
@@ -1068,32 +1068,32 @@ describe Qiita::Markdown::Processor do
     shared_examples_for "malicious script in filename" do |allowed:|
       context "with malicious script in filename" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             ```js:test<script>alert(1)</script>
             1
             ```
-          EOS
+          MARKDOWN
         end
 
         if allowed
           it "does not sanitize script element" do
-            should eq <<-EOS.strip_heredoc
+            should eq <<-HTML.strip_heredoc
               <div class="code-frame" data-lang="js">
               <div class="code-lang"><span class="bold">test<script>alert(1)</script></span></div>
               <div class="highlight"><pre><span></span><span class="mi">1</span>
               </pre></div>
               </div>
-            EOS
+            HTML
           end
         else
           it "sanitizes script element" do
-            should eq <<-EOS.strip_heredoc
+            should eq <<-HTML.strip_heredoc
               <div class="code-frame" data-lang="js">
               <div class="code-lang"><span class="bold">test</span></div>
               <div class="highlight"><pre><span></span><span class="mi">1</span>
               </pre></div>
               </div>
-            EOS
+            HTML
           end
         end
       end
@@ -1102,9 +1102,9 @@ describe Qiita::Markdown::Processor do
     shared_examples_for "iframe element" do |allowed:|
       context "with iframe" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             <iframe width="1" height="2" src="//example.com" frameborder="0" allowfullscreen></iframe>
-          EOS
+          MARKDOWN
         end
 
         if allowed
@@ -1122,9 +1122,9 @@ describe Qiita::Markdown::Processor do
     shared_examples_for "input element" do |allowed:|
       context "with input" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             <input type="checkbox"> foo
-          EOS
+          MARKDOWN
         end
 
         if allowed
@@ -1142,44 +1142,66 @@ describe Qiita::Markdown::Processor do
     shared_examples_for "data-attributes" do |allowed:|
       context "with data-attributes for general tags" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             <div data-a="b"></div>
-          EOS
+          MARKDOWN
         end
 
         if allowed
           it "does not sanitize data-attributes" do
-            should eq <<-EOS.strip_heredoc
+            should eq <<-HTML.strip_heredoc
               <div data-a="b"></div>
-            EOS
+            HTML
           end
         else
           it "sanitizes data-attributes" do
-            should eq <<-EOS.strip_heredoc
+            should eq <<-HTML.strip_heredoc
               <div></div>
-            EOS
+            HTML
+          end
+        end
+      end
+
+      context "with data-attributes for <blockquote> tag" do
+        let(:markdown) do
+          <<-MARKDOWN.strip_heredoc
+            <blockquote data-theme="a" data-malicious="b"></blockquote>
+          MARKDOWN
+        end
+
+        if allowed
+          it "does not sanitize data-attributes" do
+            should eq <<-HTML.strip_heredoc
+              <blockquote data-theme="a" data-malicious="b"></blockquote>
+            HTML
+          end
+        else
+          it "sanitizes data-attributes except the attributes used by tweet" do
+            should eq <<-HTML.strip_heredoc
+              <blockquote data-theme="a"></blockquote>
+            HTML
           end
         end
       end
 
       context "with data-attributes for <p> tag" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             <p data-slug-hash="a" data-malicious="b"></p>
-          EOS
+          MARKDOWN
         end
 
         if allowed
           it "does not sanitize data-attributes" do
-            should eq <<-EOS.strip_heredoc
+            should eq <<-HTML.strip_heredoc
               <p data-slug-hash="a" data-malicious="b"></p>
-            EOS
+            HTML
           end
         else
           it "sanitizes data-attributes except the attributes used by codepen" do
-            should eq <<-EOS.strip_heredoc
+            should eq <<-HTML.strip_heredoc
               <p data-slug-hash="a"></p>
-            EOS
+            HTML
           end
         end
       end
@@ -1204,91 +1226,91 @@ describe Qiita::Markdown::Processor do
 
       context "with class attribute for <a> tag" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             <a href="foo" class="malicious-class">foo</a>
             http://qiita.com/
-          EOS
+          MARKDOWN
         end
 
         if allowed
           it "does not sanitize the classes" do
-            should eq <<-EOS.strip_heredoc
+            should eq <<-HTML.strip_heredoc
               <p><a href="foo" class="malicious-class">foo</a><br>
               <a href="http://qiita.com/" class="autolink" rel="nofollow noopener" target="_blank">http://qiita.com/</a></p>
-            EOS
+            HTML
           end
         else
           it "sanitizes classes except `autolink`" do
-            should eq <<-EOS.strip_heredoc
+            should eq <<-HTML.strip_heredoc
               <p><a href="foo" class="">foo</a><br>
               <a href="http://qiita.com/" class="autolink" rel="nofollow noopener" target="_blank">http://qiita.com/</a></p>
-            EOS
+            HTML
           end
         end
       end
 
       context "with class attribute for <blockquote> tag" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             <blockquote class="twitter-tweet malicious-class">foo</blockquote>
-          EOS
+          MARKDOWN
         end
 
         if allowed
           it "does not sanitize the classes" do
-            should eq <<-EOS.strip_heredoc
+            should eq <<-HTML.strip_heredoc
               <blockquote class="twitter-tweet malicious-class">foo</blockquote>
-            EOS
+            HTML
           end
         else
           it "sanitizes classes except `twitter-tweet`" do
-            should eq <<-EOS.strip_heredoc
+            should eq <<-HTML.strip_heredoc
               <blockquote class="twitter-tweet">foo</blockquote>
-            EOS
+            HTML
           end
         end
       end
 
       context "with class attribute for <div> tag" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             <div class="footnotes malicious-class">foo</div>
-          EOS
+          MARKDOWN
         end
 
         if allowed
           it "does not sanitize the classes" do
-            should eq <<-EOS.strip_heredoc
+            should eq <<-HTML.strip_heredoc
               <div class="footnotes malicious-class">foo</div>
-            EOS
+            HTML
           end
         else
           it "sanitizes classes except `footnotes`" do
-            should eq <<-EOS.strip_heredoc
+            should eq <<-HTML.strip_heredoc
               <div class="footnotes">foo</div>
-            EOS
+            HTML
           end
         end
       end
 
       context "with class attribute for <p> tag" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             <p class="codepen malicious-class">foo</p>
-          EOS
+          MARKDOWN
         end
 
         if allowed
           it "does not sanitize the classes" do
-            should eq <<-EOS.strip_heredoc
+            should eq <<-HTML.strip_heredoc
               <p class="codepen malicious-class">foo</p>
-            EOS
+            HTML
           end
         else
           it "sanitizes classes except `codepen`" do
-            should eq <<-EOS.strip_heredoc
+            should eq <<-HTML.strip_heredoc
               <p class="codepen">foo</p>
-            EOS
+            HTML
           end
         end
       end
@@ -1313,55 +1335,93 @@ describe Qiita::Markdown::Processor do
     end
 
     shared_examples_for "override embed code attributes" do |allowed:|
-      context "with HTML embed code for CodePen" do
+      context "with HTML embed code for CodePen using old script url" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
+          <<-MARKDOWN.strip_heredoc
             <p data-height="1" data-theme-id="0" data-slug-hash="foo" data-default-tab="bar" data-user="baz" data-embed-version="2" data-pen-title="qux" class="codepen"></p>
             <script src="https://production-assets.codepen.io/assets/embed/ei.js"></script>
-          EOS
+          MARKDOWN
         end
 
         if allowed
           it "does not sanitize embed code" do
-            should eq <<-EOS.strip_heredoc
+            should eq <<-HTML.strip_heredoc
               <p data-height="1" data-theme-id="0" data-slug-hash="foo" data-default-tab="bar" data-user="baz" data-embed-version="2" data-pen-title="qux" class="codepen"></p>\n
               <script src="https://production-assets.codepen.io/assets/embed/ei.js"></script>
-            EOS
+            HTML
           end
         else
-          it "sanitizes data-attributes except the minimum attributes and force async attribute" do
-            should eq <<-EOS.strip_heredoc
-              <p data-slug-hash="foo" data-embed-version="2" class="codepen"></p>\n
+          it "forces async attribute on script" do
+            should eq <<-HTML.strip_heredoc
+              <p data-height="1" data-theme-id="0" data-slug-hash="foo" data-default-tab="bar" data-user="baz" data-embed-version="2" data-pen-title="qux" class="codepen"></p>\n
               <script src="https://production-assets.codepen.io/assets/embed/ei.js" async="async"></script>
-            EOS
+            HTML
           end
         end
       end
 
-      context "with embed code for Tweet" do
+      context "with HTML embed code for CodePen" do
         let(:markdown) do
-          <<-EOS.strip_heredoc
-            <blockquote class="twitter-tweet" data-cards="hidden" data-conversation="none">foo</blockquote>
-            <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
-          EOS
+          <<-MARKDOWN.strip_heredoc
+            <p data-height="1" data-theme-id="0" data-slug-hash="foo" data-default-tab="bar" data-user="baz" data-embed-version="2" data-pen-title="qux" class="codepen"></p>
+            <script src="https://static.codepen.io/assets/embed/ei.js"></script>
+          MARKDOWN
+        end
+
+        if allowed
+          it "does not sanitize embed code" do
+            should eq <<-HTML.strip_heredoc
+              <p data-height="1" data-theme-id="0" data-slug-hash="foo" data-default-tab="bar" data-user="baz" data-embed-version="2" data-pen-title="qux" class="codepen"></p>\n
+              <script src="https://static.codepen.io/assets/embed/ei.js"></script>
+            HTML
+          end
+        else
+          it "forces async attribute on script" do
+            should eq <<-HTML.strip_heredoc
+              <p data-height="1" data-theme-id="0" data-slug-hash="foo" data-default-tab="bar" data-user="baz" data-embed-version="2" data-pen-title="qux" class="codepen"></p>\n
+              <script src="https://static.codepen.io/assets/embed/ei.js" async="async"></script>
+            HTML
+          end
+        end
+      end
+
+      context "with HTML embed code for Asciinema" do
+        let(:markdown) do
+          <<-MARKDOWN.strip_heredoc
+            <script id="example" src="https://asciinema.org/a/example.js"></script>
+          MARKDOWN
         end
 
         if allowed
           it "does not sanitize embed code" do
-            should eq <<-EOS.strip_heredoc
-              <blockquote class="twitter-tweet" data-cards="hidden" data-conversation="none">foo</blockquote>\n
-              <script async src="https://platform.twitter.com/widgets.js"></script>
-            EOS
+            should eq <<-HTML.strip_heredoc
+              <script id="example" src="https://asciinema.org/a/example.js"></script>
+            HTML
           end
         else
-          it "sanitizes attributes except `twitter-tweet` class" do
-            should eq <<-EOS.strip_heredoc
-              <blockquote class="twitter-tweet">foo</blockquote>\n
-              <script async src="https://platform.twitter.com/widgets.js"></script>
-            EOS
+          it "forces async attribute on script" do
+            should eq <<-HTML.strip_heredoc
+              <script id="example" src="https://asciinema.org/a/example.js" async="async"></script>
+            HTML
           end
         end
       end
+
+      context "with embed code for Tweet" do
+        let(:markdown) do
+          <<-MARKDOWN.strip_heredoc
+            <blockquote class="twitter-tweet" data-lang="es" data-cards="hidden" data-conversation="none">foo</blockquote>
+            <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
+          MARKDOWN
+        end
+
+        it "does not sanitize embed code" do
+          should eq <<-HTML.strip_heredoc
+            <blockquote class="twitter-tweet" data-lang="es" data-cards="hidden" data-conversation="none">foo</blockquote>\n
+            <script async src="https://platform.twitter.com/widgets.js"></script>
+          HTML
+        end
+      end
     end
 
     context "without script and strict context" do