From 2160983f21fadd03ef06ddb77605063f55924df6 Mon Sep 17 00:00:00 2001
From: Matt Baer <matt@write.as>
Date: Wed, 30 May 2018 21:45:11 -0400
Subject: [PATCH] Render Markdown in profile bio

---
 templates/profile.tmpl |  2 +-
 user.go                | 25 ++++++++++++++++++++++++-
 2 files changed, 25 insertions(+), 2 deletions(-)

diff --git a/templates/profile.tmpl b/templates/profile.tmpl
index 2cea9df..f0bc364 100644
--- a/templates/profile.tmpl
+++ b/templates/profile.tmpl
@@ -18,7 +18,7 @@
 								</div>
 								<h1>{{.Name.String}}</h1>
 								<h2>{{.Header.String}}</h2>
-								<p id="bio">{{.RenderedBio}}</p>
+								<div id="bio">{{.RenderedBio}}</div>
 							</div>
 							<div>
 								<ul class="buttons">
diff --git a/user.go b/user.go
index dd3e92a..d7b6b0f 100644
--- a/user.go
+++ b/user.go
@@ -1,6 +1,8 @@
 package publicbio
 
 import (
+	"github.com/microcosm-cc/bluemonday"
+	"github.com/writeas/saturday"
 	"github.com/writeas/web-core/converter"
 	"html/template"
 )
@@ -17,7 +19,28 @@ type Profile struct {
 }
 
 func (p *Profile) RenderedBio() template.HTML {
-	return template.HTML(p.Bio.String)
+	return template.HTML(applyMarkdown(p.Bio.String))
+}
+
+func applyMarkdown(data string) string {
+	mdExtensions := 0 |
+		blackfriday.EXTENSION_TABLES |
+		blackfriday.EXTENSION_FENCED_CODE |
+		blackfriday.EXTENSION_AUTOLINK |
+		blackfriday.EXTENSION_STRIKETHROUGH |
+		blackfriday.EXTENSION_SPACE_HEADERS |
+		blackfriday.EXTENSION_HEADER_IDS
+	htmlFlags := 0 |
+		blackfriday.HTML_USE_SMARTYPANTS |
+		blackfriday.HTML_SMARTYPANTS_DASHES
+
+	// Generate Markdown
+	md := blackfriday.Markdown([]byte(data), blackfriday.HtmlRenderer(htmlFlags, "", ""), mdExtensions)
+	// Strip out bad HTML
+	policy := bluemonday.UGCPolicy()
+	policy.AllowAttrs("target").OnElements("a")
+	policy.AllowAttrs("style", "class", "id").Globally()
+	return string(policy.SanitizeBytes(md))
 }
 
 type Link struct {