securemark 0.231.0 → 0.232.0

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## 0.232.0
+
+- Refine paragraph syntax to separate mention syntax.
+- Rename mention syntax to reply syntax.
+
+## 0.231.2
+
+- Refactoring.
+
+## 0.231.1
+
+- Fix comment syntax.
+- Fix ReDoS.
+
 ## 0.231.0
 
 - Refine hashtag syntax.

package/dist/securemark.js

@@ -1,4 +1,4 @@
-/*! securemark v0.231.0 https://github.com/falsandtru/securemark | (c) 2017, falsandtru | UNLICENSED */
+/*! securemark v0.232.0 https://github.com/falsandtru/securemark | (c) 2017, falsandtru | UNLICENSED */
 require = function () {
     function r(e, n, t) {
         function o(i, f) {
@@ -896,12 +896,16 @@ require = function () {
             var __createBinding = this && this.__createBinding || (Object.create ? function (o, m, k, k2) {
                 if (k2 === undefined)
                     k2 = k;
-                Object.defineProperty(o, k2, {
-                    enumerable: true,
-                    get: function () {
-                        return m[k];
-                    }
-                });
+                var desc = Object.getOwnPropertyDescriptor(m, k);
+                if (!desc || ('get' in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+                    desc = {
+                        enumerable: true,
+                        get: function () {
+                            return m[k];
+                        }
+                    };
+                }
+                Object.defineProperty(o, k2, desc);
             } : function (o, m, k, k2) {
                 if (k2 === undefined)
                     k2 = k;
@@ -1147,12 +1151,16 @@ require = function () {
             var __createBinding = this && this.__createBinding || (Object.create ? function (o, m, k, k2) {
                 if (k2 === undefined)
                     k2 = k;
-                Object.defineProperty(o, k2, {
-                    enumerable: true,
-                    get: function () {
-                        return m[k];
-                    }
-                });
+                var desc = Object.getOwnPropertyDescriptor(m, k);
+                if (!desc || ('get' in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+                    desc = {
+                        enumerable: true,
+                        get: function () {
+                            return m[k];
+                        }
+                    };
+                }
+                Object.defineProperty(o, k2, desc);
             } : function (o, m, k, k2) {
                 if (k2 === undefined)
                     k2 = k;
@@ -2502,7 +2510,7 @@ require = function () {
                             [privates.scope](child) {
                                 if (child.element.tagName !== 'STYLE')
                                     return;
-                                const target = /(^|[,}])(\s*)\$scope(?![\w-])(?=[^;{}]*{)/g;
+                                const target = /(^|[,}]|\*\/)(\s*)\$scope(?=[\s~+[{:>,])/g;
                                 const style = child.element.innerHTML;
                                 if (!target.test(style))
                                     return;
@@ -3081,12 +3089,16 @@ require = function () {
             var __createBinding = this && this.__createBinding || (Object.create ? function (o, m, k, k2) {
                 if (k2 === undefined)
                     k2 = k;
-                Object.defineProperty(o, k2, {
-                    enumerable: true,
-                    get: function () {
-                        return m[k];
-                    }
-                });
+                var desc = Object.getOwnPropertyDescriptor(m, k);
+                if (!desc || ('get' in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+                    desc = {
+                        enumerable: true,
+                        get: function () {
+                            return m[k];
+                        }
+                    };
+                }
+                Object.defineProperty(o, k2, desc);
             } : function (o, m, k, k2) {
                 if (k2 === undefined)
                     k2 = k;
@@ -4015,12 +4027,16 @@ require = function () {
             var __createBinding = this && this.__createBinding || (Object.create ? function (o, m, k, k2) {
                 if (k2 === undefined)
                     k2 = k;
-                Object.defineProperty(o, k2, {
-                    enumerable: true,
-                    get: function () {
-                        return m[k];
-                    }
-                });
+                var desc = Object.getOwnPropertyDescriptor(m, k);
+                if (!desc || ('get' in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+                    desc = {
+                        enumerable: true,
+                        get: function () {
+                            return m[k];
+                        }
+                    };
+                }
+                Object.defineProperty(o, k2, desc);
             } : function (o, m, k, k2) {
                 if (k2 === undefined)
                     k2 = k;
@@ -4329,7 +4345,7 @@ require = function () {
             function headers(source) {
                 var _a;
                 const [el] = parse(source);
-                return (_a = el === null || el === void 0 ? void 0 : el.textContent.trimEnd().slice(el.firstChild.textContent.length).split(/[^\S\n]*\n/)) !== null && _a !== void 0 ? _a : [];
+                return (_a = el === null || el === void 0 ? void 0 : el.textContent.trimEnd().slice(el.firstChild.textContent.length).split('\n')) !== null && _a !== void 0 ? _a : [];
             }
             exports.headers = headers;
             function parse(source) {
@@ -4528,6 +4544,7 @@ require = function () {
             const codeblock_1 = _dereq_('./block/codeblock');
             const mathblock_1 = _dereq_('./block/mathblock');
             const extension_1 = _dereq_('./block/extension');
+            const reply_1 = _dereq_('./block/reply');
             const paragraph_1 = _dereq_('./block/paragraph');
             const typed_dom_1 = _dereq_('typed-dom');
             const random_1 = _dereq_('spica/random');
@@ -4544,6 +4561,7 @@ require = function () {
                 mathblock_1.mathblock,
                 extension_1.extension,
                 blockquote_1.blockquote,
+                reply_1.reply,
                 paragraph_1.paragraph
             ]))));
             function error(parser) {
@@ -4577,6 +4595,7 @@ require = function () {
             './block/mathblock': 79,
             './block/olist': 80,
             './block/paragraph': 81,
+            './block/reply': 82,
             './block/table': 85,
             './block/ulist': 86,
             './source': 128,
@@ -5291,7 +5310,7 @@ require = function () {
                     colspan,
                     ...valid ? { 'data-highlight-level': +highlight > 1 ? highlight : global_1.undefined } : {
                         'data-invalid-syntax': 'table',
-                        'data-invalid-type': 'highlight',
+                        'data-invalid-type': 'syntax',
                         'data-invalid-description': 'Too much highlight level.'
                     }
                 };
@@ -5760,31 +5779,17 @@ require = function () {
             Object.defineProperty(exports, '__esModule', { value: true });
             exports.paragraph = void 0;
             const combinator_1 = _dereq_('../../combinator');
-            const mention_1 = _dereq_('./paragraph/mention');
-            const quote_1 = _dereq_('./paragraph/mention/quote');
             const inline_1 = _dereq_('../inline');
-            const source_1 = _dereq_('../source');
             const locale_1 = _dereq_('../locale');
             const util_1 = _dereq_('../util');
             const typed_dom_1 = _dereq_('typed-dom');
-            const array_1 = _dereq_('spica/array');
-            exports.paragraph = (0, combinator_1.block)((0, locale_1.localize)((0, combinator_1.fmap)((0, combinator_1.subsequence)([
-                (0, combinator_1.some)(mention_1.mention),
-                (0, combinator_1.some)((0, combinator_1.union)([
-                    quote_1.quote,
-                    (0, combinator_1.fmap)((0, combinator_1.rewrite)((0, combinator_1.some)(source_1.anyline, quote_1.syntax), (0, combinator_1.trim)((0, util_1.visualize)((0, combinator_1.some)(inline_1.inline)))), ns => (0, array_1.push)(ns, [(0, typed_dom_1.html)('br')]))
-                ]))
-            ]), ns => [(0, typed_dom_1.html)('p', (0, typed_dom_1.defrag)((0, array_1.pop)(ns)[0]))])));
+            exports.paragraph = (0, combinator_1.block)((0, locale_1.localize)((0, combinator_1.fmap)((0, combinator_1.trim)((0, util_1.visualize)((0, combinator_1.some)((0, combinator_1.union)([inline_1.inline])))), ns => [(0, typed_dom_1.html)('p', (0, typed_dom_1.defrag)(ns))])));
         },
         {
             '../../combinator': 27,
             '../inline': 88,
             '../locale': 123,
-            '../source': 128,
             '../util': 134,
-            './paragraph/mention': 82,
-            './paragraph/mention/quote': 84,
-            'spica/array': 6,
             'typed-dom': 26
         }
     ],
@@ -5792,19 +5797,37 @@ require = function () {
         function (_dereq_, module, exports) {
             'use strict';
             Object.defineProperty(exports, '__esModule', { value: true });
-            exports.mention = void 0;
-            const combinator_1 = _dereq_('../../../combinator');
-            const cite_1 = _dereq_('./mention/cite');
-            const quote_1 = _dereq_('./mention/quote');
-            exports.mention = (0, combinator_1.validate)('>', (0, combinator_1.inits)([
-                (0, combinator_1.some)(cite_1.cite),
-                quote_1.quote
-            ]));
+            exports.reply = void 0;
+            const combinator_1 = _dereq_('../../combinator');
+            const cite_1 = _dereq_('./reply/cite');
+            const quote_1 = _dereq_('./reply/quote');
+            const inline_1 = _dereq_('../inline');
+            const source_1 = _dereq_('../source');
+            const locale_1 = _dereq_('../locale');
+            const util_1 = _dereq_('../util');
+            const typed_dom_1 = _dereq_('typed-dom');
+            const array_1 = _dereq_('spica/array');
+            exports.reply = (0, combinator_1.block)((0, combinator_1.validate)('>', (0, locale_1.localize)((0, combinator_1.fmap)((0, combinator_1.some)((0, combinator_1.inits)([
+                (0, combinator_1.some)((0, combinator_1.inits)([
+                    cite_1.cite,
+                    quote_1.quote
+                ])),
+                (0, combinator_1.subsequence)([
+                    (0, combinator_1.some)(quote_1.quote),
+                    (0, combinator_1.fmap)((0, combinator_1.rewrite)((0, combinator_1.some)(source_1.anyline, quote_1.syntax), (0, combinator_1.trim)((0, util_1.visualize)((0, combinator_1.some)(inline_1.inline)))), ns => (0, array_1.push)(ns, [(0, typed_dom_1.html)('br')]))
+                ])
+            ])), ns => [(0, typed_dom_1.html)('p', (0, typed_dom_1.defrag)((0, array_1.pop)(ns)[0]))]))));
         },
         {
-            '../../../combinator': 27,
-            './mention/cite': 83,
-            './mention/quote': 84
+            '../../combinator': 27,
+            '../inline': 88,
+            '../locale': 123,
+            '../source': 128,
+            '../util': 134,
+            './reply/cite': 83,
+            './reply/quote': 84,
+            'spica/array': 6,
+            'typed-dom': 26
         }
     ],
     83: [
@@ -5812,9 +5835,9 @@ require = function () {
             'use strict';
             Object.defineProperty(exports, '__esModule', { value: true });
             exports.cite = void 0;
-            const combinator_1 = _dereq_('../../../../combinator');
-            const anchor_1 = _dereq_('../../../inline/autolink/anchor');
-            const source_1 = _dereq_('../../../source');
+            const combinator_1 = _dereq_('../../../combinator');
+            const anchor_1 = _dereq_('../../inline/autolink/anchor');
+            const source_1 = _dereq_('../../source');
             const typed_dom_1 = _dereq_('typed-dom');
             exports.cite = (0, combinator_1.creator)((0, combinator_1.line)((0, combinator_1.fmap)((0, combinator_1.validate)('>>', (0, combinator_1.reverse)((0, combinator_1.tails)([
                 (0, source_1.str)(/^>*(?=>>)/),
@@ -5828,9 +5851,9 @@ require = function () {
             ])));
         },
         {
-            '../../../../combinator': 27,
-            '../../../inline/autolink/anchor': 92,
-            '../../../source': 128,
+            '../../../combinator': 27,
+            '../../inline/autolink/anchor': 92,
+            '../../source': 128,
             'typed-dom': 26
         }
     ],
@@ -5839,11 +5862,11 @@ require = function () {
             'use strict';
             Object.defineProperty(exports, '__esModule', { value: true });
             exports.quote = exports.syntax = void 0;
-            const parser_1 = _dereq_('../../../../combinator/data/parser');
-            const combinator_1 = _dereq_('../../../../combinator');
-            const math_1 = _dereq_('../../../inline/math');
-            const source_1 = _dereq_('../../../source');
-            const autolink_1 = _dereq_('../../../autolink');
+            const parser_1 = _dereq_('../../../combinator/data/parser');
+            const combinator_1 = _dereq_('../../../combinator');
+            const math_1 = _dereq_('../../inline/math');
+            const source_1 = _dereq_('../../source');
+            const autolink_1 = _dereq_('../../autolink');
             const typed_dom_1 = _dereq_('typed-dom');
             exports.syntax = /^>+(?=[^\S\n])|^>(?=[^\s>])|^>+(?=[^\s>])(?![0-9a-z]+(?:-[0-9a-z]+)*(?![0-9A-Za-z@#:]))/;
             exports.quote = (0, combinator_1.lazy)(() => (0, combinator_1.creator)((0, combinator_1.block)((0, combinator_1.fmap)((0, combinator_1.validate)('>', (0, combinator_1.union)([
@@ -5896,11 +5919,11 @@ require = function () {
             ]);
         },
         {
-            '../../../../combinator': 27,
-            '../../../../combinator/data/parser': 47,
-            '../../../autolink': 62,
-            '../../../inline/math': 116,
-            '../../../source': 128,
+            '../../../combinator': 27,
+            '../../../combinator/data/parser': 47,
+            '../../autolink': 62,
+            '../../inline/math': 116,
+            '../../source': 128,
             'typed-dom': 26
         }
     ],
@@ -6501,10 +6524,7 @@ require = function () {
             const source_1 = _dereq_('../source');
             const typed_dom_1 = _dereq_('typed-dom');
             const array_1 = _dereq_('spica/array');
-            const index = new RegExp(`^(?:${ [
-                /(?:0|[1-9]\d*)(?:\.(?:0|[1-9]\d*))+/,
-                /[0-9]{1,4}|[A-Za-z]/
-            ].map(r => r.source).join('|') })`);
+            const index = /^(?:[0-9]+(?:\.[0-9]+)*|[A-Za-z])/;
             const indexFW = new RegExp(index.source.replace(/[019AZaz](?!,)/g, c => String.fromCharCode(c.charCodeAt(0) + 65248)));
             exports.bracket = (0, combinator_1.lazy)(() => (0, combinator_1.union)([
                 (0, combinator_1.surround)((0, source_1.str)('('), (0, source_1.str)(index), (0, source_1.str)(')'), false, ([as, bs = [], cs], rest) => [
@@ -6582,8 +6602,8 @@ require = function () {
             const htmlentity_1 = _dereq_('./htmlentity');
             const source_1 = _dereq_('../source');
             const typed_dom_1 = _dereq_('typed-dom');
-            exports.comment = (0, combinator_1.creator)((0, combinator_1.validate)('[#', (0, combinator_1.match)(/^\[(#+)\s+(?!\s|\1\]|\[\1\s)((?:\S+\s+)+?)(\1\]|(?=\[\1(?:$|\s)))/, ([whole, , body, closer]) => (rest, context) => {
-                [whole, body] = `${ whole }\0${ body.trimEnd() }`.replace(/\x1B/g, '').split('\0', 2);
+            exports.comment = (0, combinator_1.creator)((0, combinator_1.validate)('[#', (0, combinator_1.match)(/^\[(#+)(?!\S|\s+\1\]|\s*\[\1(?:$|\s))((?:\s+\S+)+?)(?:\s+(\1\])|\s*(?=\[\1(?:$|\s)))/, ([whole, , body, closer]) => (rest, context) => {
+                [whole, body] = `${ whole }\0${ body.trimStart() }`.replace(/\x1B/g, '').split('\0', 2);
                 if (!closer)
                     return [
                         [(0, typed_dom_1.html)('sup', {
@@ -7124,7 +7144,7 @@ require = function () {
                     rest
                 ] : global_1.undefined)), ([, tag]) => tag, new cache_1.Cache(1000)))
             ])))));
-            exports.attribute = (0, combinator_1.union)([(0, source_1.str)(/^[^\S\n]+[a-z]+(?:-[a-z]+)*(?:="(?:\\[^\n]|[^\n"])*")?(?=[^\S\n]|>)/)]);
+            exports.attribute = (0, combinator_1.union)([(0, source_1.str)(/^[^\S\n]+[a-z]+(?:-[a-z]+)*(?:="(?:\\[^\n]|[^\\\n"])*")?(?=[^\S\n]|>)/)]);
             function elem(tag, as, bs, cs, context) {
                 var _a, _b, _c, _d, _e, _f;
                 if (!tags.includes(tag))
@@ -7305,7 +7325,7 @@ require = function () {
                 if ((_a = (0, parser_1.eval)((0, combinator_1.some)(autolink_1.autolink)((0, util_1.stringify)(content), context))) === null || _a === void 0 ? void 0 : _a.some(node => typeof node === 'object'))
                     return;
                 const INSECURE_URI = params.shift();
-                const el = create(INSECURE_URI, (0, util_1.trimNode)((0, typed_dom_1.defrag)(content)), new url_1.ReadonlyURL(resolve(INSECURE_URI, (_b = context.host) !== null && _b !== void 0 ? _b : global_1.location, (_d = (_c = context.url) !== null && _c !== void 0 ? _c : context.host) !== null && _d !== void 0 ? _d : global_1.location), ((_e = context.host) === null || _e === void 0 ? void 0 : _e.href) || global_1.location.href), ((_f = context.host) === null || _f === void 0 ? void 0 : _f.origin) || global_1.location.origin);
+                const el = elem(INSECURE_URI, (0, util_1.trimNode)((0, typed_dom_1.defrag)(content)), new url_1.ReadonlyURL(resolve(INSECURE_URI, (_b = context.host) !== null && _b !== void 0 ? _b : global_1.location, (_d = (_c = context.url) !== null && _c !== void 0 ? _c : context.host) !== null && _d !== void 0 ? _d : global_1.location), ((_e = context.host) === null || _e === void 0 ? void 0 : _e.href) || global_1.location.href), ((_f = context.host) === null || _f === void 0 ? void 0 : _f.origin) || global_1.location.origin);
                 if (el.classList.contains('invalid'))
                     return [
                         [el],
@@ -7322,7 +7342,7 @@ require = function () {
             ]);
             exports.option = (0, combinator_1.union)([
                 (0, combinator_1.fmap)((0, source_1.str)(/^[^\S\n]+nofollow(?=[^\S\n]|})/), () => [` rel="nofollow"`]),
-                (0, source_1.str)(/^[^\S\n]+[a-z]+(?:-[a-z]+)*(?:="(?:\\[^\n]|[^\n"])*")?(?=[^\S\n]|})/),
+                (0, source_1.str)(/^[^\S\n]+[a-z]+(?:-[a-z]+)*(?:="(?:\\[^\n]|[^\\\n"])*")?(?=[^\S\n]|})/),
                 (0, combinator_1.fmap)((0, source_1.str)(/^[^\S\n]+(?=})/), () => []),
                 (0, combinator_1.fmap)((0, source_1.str)(/^[^\S\n]+[^\n{}]+/), opt => [` \\${ opt.slice(1) }`])
             ]);
@@ -7340,7 +7360,7 @@ require = function () {
                 }
             }
             exports.resolve = resolve;
-            function create(INSECURE_URI, content, uri, origin) {
+            function elem(INSECURE_URI, content, uri, origin) {
                 let type;
                 let description;
                 switch (uri.protocol) {
@@ -7700,8 +7720,8 @@ require = function () {
             const typed_dom_1 = _dereq_('typed-dom');
             const array_1 = _dereq_('spica/array');
             exports.ruby = (0, combinator_1.lazy)(() => (0, combinator_1.creator)((0, combinator_1.bind)((0, combinator_1.verify)((0, combinator_1.validate)('[', ')', '\n', (0, combinator_1.sequence)([
-                (0, combinator_1.surround)('[', (0, combinator_1.focus)(/^(?:\\[^\n]|[^\[\]\n])+(?=]\()/, text), ']'),
-                (0, combinator_1.surround)('(', (0, combinator_1.focus)(/^(?:\\[^\n]|[^\(\)\n])+(?=\))/, text), ')')
+                (0, combinator_1.surround)('[', (0, combinator_1.focus)(/^(?:\\[^\n]|[^\\\[\]\n])+(?=]\()/, text), ']'),
+                (0, combinator_1.surround)('(', (0, combinator_1.focus)(/^(?:\\[^\n]|[^\\\(\)\n])+(?=\))/, text), ')')
             ])), ([texts]) => (0, util_1.isStartTightNodes)(texts)), ([texts, rubies], rest) => {
                 const tail = typeof texts[texts.length - 1] === 'object' ? [texts.pop()] : [];
                 tail.length === 0 && texts[texts.length - 1] === '' && texts.pop();
@@ -8667,10 +8687,10 @@ require = function () {
                 'InvisibleComma',
                 'ic'
             ];
-            const blankline = new RegExp(String.raw`^(?!$|\n)(?:\\?\s|&(?:${ invisibleHTMLEntityNames.join('|') });|<wbr>|\[(#+)\s+(?!\s|\1\]|\[\1\s)(?:\S+\s+)+?(?:\1\]|(?=\[\1(?:$|\s))))*\\?(?:$|\n)`, 'gm');
+            const blankline = new RegExp(String.raw`^(?!$)(?:\\$|\\?[^\S\n]|&(?:${ invisibleHTMLEntityNames.join('|') });|<wbr>|\[(#+)(?!\S|\s+\1\]|\s*\[\1(?:$|\s))((?:\s+\S+)+?)(?:\s+(\1\])|\s*(?=\[\1(?:$|\s))))+(?=$|(\S))`, 'gm');
             function visualize(parser) {
                 return (0, combinator_1.union)([
-                    (0, combinator_1.convert)(source => source.replace(blankline, line => line.replace(/[\\&<\[]/g, '\x1B$&')), (0, combinator_1.verify)(parser, (ns, rest, context) => !rest && hasVisible(ns, context))),
+                    (0, combinator_1.convert)(source => source.replace(blankline, (line, ...$) => !$[3] ? line.replace(/[\\&<\[]/g, '\x1B$&') : line), (0, combinator_1.verify)(parser, (ns, rest, context) => !rest && hasVisible(ns, context))),
                     (0, combinator_1.some)((0, combinator_1.union)([
                         source_1.linebreak,
                         source_1.unescsource
@@ -8950,12 +8970,16 @@ require = function () {
                     var __createBinding = this && this.__createBinding || (Object.create ? function (o, m, k, k2) {
                         if (k2 === undefined)
                             k2 = k;
-                        Object.defineProperty(o, k2, {
-                            enumerable: true,
-                            get: function () {
-                                return m[k];
-                            }
-                        });
+                        var desc = Object.getOwnPropertyDescriptor(m, k);
+                        if (!desc || ('get' in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+                            desc = {
+                                enumerable: true,
+                                get: function () {
+                                    return m[k];
+                                }
+                            };
+                        }
+                        Object.defineProperty(o, k2, desc);
                     } : function (o, m, k, k2) {
                         if (k2 === undefined)
                             k2 = k;
@@ -9264,11 +9288,12 @@ require = function () {
             }
             exports.youtube = youtube;
             function resolve(url) {
+                var _a;
                 switch (url.origin) {
                 case 'https://www.youtube.com':
-                    return url.pathname === '/watch/' ? url.href.replace(/.+?=/, '').replace('&', '?') : undefined;
+                    return url.pathname.match(/^\/watch\/?$/) ? (_a = url.searchParams.get('v')) === null || _a === void 0 ? void 0 : _a.concat(url.search.replace(/([?&])v=[^&#]*&?/g, '$1'), url.hash) : undefined;
                 case 'https://youtu.be':
-                    return url.pathname.match(/^\/[\w-]+$/) ? url.href.slice(url.href.indexOf('/', 9) + 1) : undefined;
+                    return url.pathname.match(/^\/[\w-]+\/?$/) ? url.href.slice(url.origin.length) : undefined;
                 default:
                     return;
                 }
@@ -9332,7 +9357,7 @@ require = function () {
             exports.info = void 0;
             const scope_1 = _dereq_('./scope');
             function info(source) {
-                const match = (0, scope_1.scope)(source, 'section, article, aside, blockquote, .quote, pre, .math, .media');
+                const match = (0, scope_1.scope)(source, '.invalid');
                 return {
                     url: find('a:not(.email):not(.account):not(.channel):not(.hashtag):not(.hashnum):not(.anchor)').filter(el => [
                         'http:',
@@ -9344,7 +9369,7 @@ require = function () {
                     channel: find('a.channel'),
                     hashtag: find('a.hashtag'),
                     hashnum: find('a.hashnum'),
-                    mention: find('.cite > a.anchor'),
+                    reply: find('.cite > a.anchor'),
                     anchor: find(':not(.cite) > a.anchor'),
                     media: find('.media[data-src]')
                 };
@@ -9369,7 +9394,7 @@ require = function () {
             Object.defineProperty(exports, '__esModule', { value: true });
             exports.quote = void 0;
             const parser_1 = _dereq_('../combinator/data/parser');
-            const cite_1 = _dereq_('../parser/block/paragraph/mention/cite');
+            const cite_1 = _dereq_('../parser/block/reply/cite');
             const typed_dom_1 = _dereq_('typed-dom');
             function quote(anchor, range) {
                 var _a, _b;
@@ -9448,7 +9473,7 @@ require = function () {
         },
         {
             '../combinator/data/parser': 47,
-            '../parser/block/paragraph/mention/cite': 83,
+            '../parser/block/reply/cite': 83,
             'typed-dom': 26
         }
     ],
@@ -9458,7 +9483,8 @@ require = function () {
             Object.defineProperty(exports, '__esModule', { value: true });
             exports.scope = void 0;
             const global_1 = _dereq_('spica/global');
-            function scope(base, bound = `${ 'id' in base && base.id ? `#${ base.id }, ` : '' }section, article, aside, blockquote`) {
+            function scope(base, filter = '', bound = `${ 'id' in base && base.id ? `#${ base.id }, ` : '' }section, article, aside, blockquote, pre, .quote, .math, .media`) {
+                bound += filter && `, ${ filter }`;
                 const memory = new global_1.WeakMap();
                 const context = 'id' in base && base.closest(bound) || null;
                 return el => {
@@ -9607,12 +9633,16 @@ require = function () {
             var __createBinding = this && this.__createBinding || (Object.create ? function (o, m, k, k2) {
                 if (k2 === undefined)
                     k2 = k;
-                Object.defineProperty(o, k2, {
-                    enumerable: true,
-                    get: function () {
-                        return m[k];
-                    }
-                });
+                var desc = Object.getOwnPropertyDescriptor(m, k);
+                if (!desc || ('get' in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+                    desc = {
+                        enumerable: true,
+                        get: function () {
+                            return m[k];
+                        }
+                    };
+                }
+                Object.defineProperty(o, k2, desc);
             } : function (o, m, k, k2) {
                 if (k2 === undefined)
                     k2 = k;

package/gulpfile.js

@@ -98,7 +98,27 @@ gulp.task('ts:dev', () =>
 gulp.task('ts:test', () =>
   compile(config.ts.test.src)
     .pipe($.rename({ extname: '.test.js' }))
-    .pipe(gulp.dest(config.ts.test.dest)));
+    .pipe(gulp.dest(config.ts.test.dest))
+    .pipe($.eslint({
+      'parserOptions': {
+        'ecmaVersion': 2020,
+      },
+      'env': {
+        'es2020': true,
+      },
+      'plugins': ['redos'],
+      'rules': {
+        'redos/no-vulnerable': [
+          'error',
+          {
+            ignoreErrors: false,
+            timeout: 30000,
+          },
+        ],
+      },
+    }))
+    .pipe($.eslint.format())
+    .pipe($.eslint.failAfterError()));
 
 gulp.task('ts:dist', () =>
   compile(config.ts.dist.src)

package/index.d.ts

@@ -22,7 +22,7 @@ export function normalize(source: string): string;
 export function quote(anchor: string, range: Range): string;
 export function toc(source: DocumentFragment | HTMLElement | ShadowRoot): HTMLUListElement;
 export function info(source: DocumentFragment | HTMLElement | ShadowRoot): Info;
-export function scope(base: DocumentFragment | HTMLElement | ShadowRoot, bound?: string): (el: Element) => boolean;
+export function scope(base: DocumentFragment | HTMLElement | ShadowRoot, filter?: string, bound?: string): (el: Element) => boolean;
 export function sync(editor: HTMLElement, viewer: HTMLElement, bottom?: Element | null): () => void;
 
 export type ParserOptions = Omit<Partial<ParserSettings>, 'chunk'>;
@@ -76,7 +76,7 @@ export interface Info {
   readonly channel: HTMLAnchorElement[];
   readonly hashtag: HTMLAnchorElement[];
   readonly hashnum: HTMLAnchorElement[];
-  readonly mention: HTMLAnchorElement[];
+  readonly reply: HTMLAnchorElement[];
   readonly anchor: HTMLAnchorElement[];
   readonly media: HTMLElement[];
 }