another clusterfuzz spotted issue (#15032) (#15034)

Signed-off-by: Andrew Thornton <art27@cantab.net>
Co-authored-by: zeripath <art27@cantab.net>

diff --git a/modules/markup/html.go b/modules/markup/html.go
index a81b03f071112b0bba205198af3d19ad01909256..c2e574e3b29f56407d330dff574d1e8730d61d9a 100644 (file)
--- a/modules/markup/html.go
+++ b/modules/markup/html.go
@@ -298,7 +298,7 @@ func RenderEmoji(
        return ctx.postProcess(rawHTML)
 }
 
-var tagCleaner = regexp.MustCompile(`<((?:/?\w+/\w+)|(?:/[\w ]+/)|(/?[hH][tT][mM][lL][ />]))`)
+var tagCleaner = regexp.MustCompile(`<((?:/?\w+/\w+)|(?:/[\w ]+/)|(/?[hH][tT][mM][lL][ />])|(/?[hH][eE][aA][dD][ />]))`)
 var nulCleaner = strings.NewReplacer("\000", "")
 
 func (ctx *postProcessCtx) postProcess(rawHTML []byte) ([]byte, error) {