Merge pull request #1847 from hackmdio/chore/bump-pandoc-js

Address pandoc related issues

Author: Yukaii

lib/note/noteActions.js

@@ -133,14 +133,17 @@ async function actionPandoc (req, res, note) {
   content = content.replace(/\]\(\//g, '](' + url + '/')
 
   const { exportType } = req.query
+  if (typeof exportType !== 'string') {
+    return res.sendStatus(400)
+  }
+
   const contentType = outputFormats[exportType]
+  if (!contentType) {
+    return res.sendStatus(400)
+  }
 
   try {
     // TODO: timeout rejection
-    if (!contentType) {
-      return res.sendStatus(400)
-    }
-
     await pandoc.convertToFile(content, 'markdown', exportType, path, [
       '--metadata', `title=${title}`, '--sandbox'
     ])