@mui/internal-markdown 1.0.22 → 1.0.24

package/index.d.ts

@@ -6,10 +6,11 @@ interface TableOfContentsEntry {
 }
 
 export function createRender(context: {
-  headingHashes: Record<string, string>;
-  toc: TableOfContentsEntry[];
-  userLanguage: string;
-  ignoreLanguagePages: (path: string) => boolean;
+  headingHashes?: Record<string, string>;
+  toc?: TableOfContentsEntry[];
+  userLanguage?: string;
+  ignoreLanguagePages?: (path: string) => boolean;
+  options: object;
 }): (markdown: string) => string;
 
 export interface MarkdownHeaders {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mui/internal-markdown",
-  "version": "1.0.22",
+  "version": "1.0.24",
   "author": "MUI Team",
   "description": "MUI markdown parser. This is an internal package not meant for general use.",
   "main": "./index.js",
@@ -18,7 +18,7 @@
   "dependencies": {
     "@babel/runtime": "^7.26.0",
     "lodash": "^4.17.21",
-    "marked": "^15.0.3",
+    "marked": "^15.0.4",
     "prismjs": "^1.29.0"
   },
   "devDependencies": {

package/parseMarkdown.js

@@ -209,7 +209,11 @@ function getCodeblock(content) {
   if (!content.startsWith('<codeblock')) {
     return undefined;
   }
-  const storageKey = content.match(/^<codeblock [^>]*storageKey=["|'](\S*)["|'].*>/m)?.[1];
+  // The regexes below have a negative lookahead to prevent ReDoS
+  // See https://github.com/mui/material-ui/issues/44078
+  const storageKey = content.match(
+    /^<codeblock (?!<codeblock )[^>]*storageKey=["|'](?!storageKey=["|'])(\S*)["|'].*>/m,
+  )?.[1];
   const blocks = [...content.matchAll(/^```(\S*) (\S*)\n(.*?)\n```/gmsu)].map(
     ([, language, tab, code]) => ({ language, tab, code }),
   );
@@ -287,13 +291,13 @@ const noSEOadvantage = [
  * @property {number} level
  * @property {string} text
  * @param {object} context
- * @param {Record<string, string>} context.headingHashes - WILL BE MUTATED
- * @param {TableOfContentsEntry[]} context.toc - WILL BE MUTATED
- * @param {string} context.userLanguage
+ * @param {Record<string, string>} [context.headingHashes] - WILL BE MUTATED
+ * @param {TableOfContentsEntry[]} [context.toc] - WILL BE MUTATED
+ * @param {string} [context.userLanguage]
  * @param {object} context.options
  */
 function createRender(context) {
-  const { headingHashes, toc, userLanguage, options } = context;
+  const { headingHashes = {}, toc = [], userLanguage = 'en', options } = context;
   const headingHashesFallbackTranslated = {};
   let headingIndex = -1;