added data: link fix to prevent xss

[matt-]

No description provided.

[matt-]

@chjj I added this along the same lines as the javascript: xss. Can we version bump and push this?

[paulirish]

Heya @matt-
Can we expect a version bump out soon? We're interested in this fix and would like to avoid depending on a specific github commit if possible. ;)

[matt-]

No idea thats up to @chjj. I personally would love to see a bump to get this resolved.

[paulirish]

k. thank you!

@chjj can you add the other contributors here to the npm package so they can publish as well?

[guypod]

@paulirish note in the meantime you can also use a Snyk patch (see the bottom of https://snyk.io/vuln/npm:marked:20170112).

When we initially reported the problem it had no fix, but once Matt created a fix we captured it as a Snyk patch too. More about Snyk patches here: https://snyk.io/docs/security

[zhangbobell]

Thank you very much to send this pull request, it's help me a lot!