diff --git a/bower_components/marked/lib/marked.js b/bower_components/marked/lib/marked.js index e2f08c99..4fb5d2b8 100644 --- a/bower_components/marked/lib/marked.js +++ b/bower_components/marked/lib/marked.js @@ -1083,7 +1083,8 @@ function escape(html, encode) { } function unescape(html) { - return html.replace(/&([#\w]+);/g, function(_, n) { + // explicitly match decimal, hex, and named HTML entities + return html.replace(/&(#(?:\d+)|(?:#x[0-9A-Fa-f]+)|(\w+))/g, function(_, n) { n = n.toLowerCase(); if (n === 'colon') return ':'; if (n.charAt(0) === '#') {