Skip to content

Commit

Permalink
Fix infinite loop in emoji replacement code (mastodon#24615)
Browse files Browse the repository at this point in the history
  • Loading branch information
ClearlyClaire authored and Michael Mitchell committed May 3, 2023
1 parent f3432a4 commit 18502bc
Showing 1 changed file with 33 additions and 25 deletions.
58 changes: 33 additions & 25 deletions app/javascript/mastodon/features/emoji/emoji.js
Original file line number Diff line number Diff line change
Expand Up @@ -29,15 +29,15 @@ const emojifyTextNode = (node, customEmojis) => {
let i = 0;

for (;;) {
let match;
let unicode_emoji;

// Skip to the next potential emoji to replace
// Skip to the next potential emoji to replace (either custom emoji or custom emoji :shortcode:
if (customEmojis === null) {
while (i < str.length && !(match = trie.search(str.slice(i)))) {
while (i < str.length && !(unicode_emoji = trie.search(str.slice(i)))) {
i += str.codePointAt(i) < 65536 ? 1 : 2;
}
} else {
while (i < str.length && str[i] !== ':' && !(match = trie.search(str.slice(i)))) {
while (i < str.length && str[i] !== ':' && !(unicode_emoji = trie.search(str.slice(i)))) {
i += str.codePointAt(i) < 65536 ? 1 : 2;
}
}
Expand All @@ -48,43 +48,51 @@ const emojifyTextNode = (node, customEmojis) => {
}

let rend, replacement = null;
if (str[i] === ':') { // Potentially the start of a custom emoji shortcode
if (!(rend = str.indexOf(':', i + 1) + 1)) {
continue; // no pair of ':'
if (str[i] === ':') { // Potentially the start of a custom emoji :shortcode:
rend = str.indexOf(':', i + 1) + 1;

// no matching ending ':', skip
if (!rend) {
i++;
continue;
}

const shortname = str.slice(i, rend);
// now got a replacee as ':shortname:'
// if you want additional emoji handler, add statements below which set replacement and return true.
if (shortname in customEmojis) {
const filename = autoPlayGif ? customEmojis[shortname].url : customEmojis[shortname].static_url;
replacement = document.createElement('img');
replacement.setAttribute('draggable', 'false');
replacement.setAttribute('class', 'emojione custom-emoji');
replacement.setAttribute('alt', shortname);
replacement.setAttribute('title', shortname);
replacement.setAttribute('src', filename);
replacement.setAttribute('data-original', customEmojis[shortname].url);
replacement.setAttribute('data-static', customEmojis[shortname].static_url);
} else {
const shortcode = str.slice(i, rend);
const custom_emoji = customEmojis[shortcode];

// not a recognized shortcode, skip
if (!custom_emoji) {
i++;
continue;
}
} else { // matched to unicode emoji
rend = i + match.length;

// now got a replacee as ':shortcode:'
// if you want additional emoji handler, add statements below which set replacement and return true.
const filename = autoPlayGif ? custom_emoji.url : custom_emoji.static_url;
replacement = document.createElement('img');
replacement.setAttribute('draggable', 'false');
replacement.setAttribute('class', 'emojione custom-emoji');
replacement.setAttribute('alt', shortcode);
replacement.setAttribute('title', shortcode);
replacement.setAttribute('src', filename);
replacement.setAttribute('data-original', custom_emoji.url);
replacement.setAttribute('data-static', custom_emoji.static_url);
} else { // start of an unicode emoji
rend = i + unicode_emoji.length;

// If the matched character was followed by VS15 (for selecting text presentation), skip it.
if (str.codePointAt(rend - 1) !== VS16 && str.codePointAt(rend) === VS15) {
i = rend + 1;
continue;
}

const { filename, shortCode } = unicodeMapping[match];
const { filename, shortCode } = unicodeMapping[unicode_emoji];
const title = shortCode ? `:${shortCode}:` : '';

replacement = document.createElement('img');
replacement.setAttribute('draggable', 'false');
replacement.setAttribute('class', 'emojione');
replacement.setAttribute('alt', match);
replacement.setAttribute('alt', unicode_emoji);
replacement.setAttribute('title', title);
replacement.setAttribute('src', `${assetHost}/emoji/${emojiFilename(filename)}.svg`);
}
Expand Down

0 comments on commit 18502bc

Please # to comment.