Merge pull request #1976 from peruginni/master

Added condition to check if HEX code contain only valid characters (issue #1015)

Author: lukeapage

lib/less/parser.js

@@ -960,6 +960,11 @@ less.Parser = function Parser(env) {
                     var rgb;
 
                     if (input.charAt(i) === '#' && (rgb = $re(/^#([A-Fa-f0-9]{6}|[A-Fa-f0-9]{3})/))) {
+                        var colorCandidateString = rgb.input.match(/^#([\w]+).*/); // strip colons, brackets, whitespaces and other characters that should not definitely be part of color string
+                        colorCandidateString = colorCandidateString[1];
+                        if (!colorCandidateString.match(/^[A-Fa-f0-9]+$/)) { // verify if candidate consists only of allowed HEX characters
+                            error("Invalid HEX color code");
+                        } 
                         return new(tree.Color)(rgb[1]);
                     }
                 },

test/less/errors/color-invalid-hex-code.less

@@ -0,0 +1,3 @@
+.a {
+    @wrongHEXColorCode: #DCALLB;
+}

test/less/errors/color-invalid-hex-code.txt

@@ -0,0 +1,4 @@
+SyntaxError: Invalid HEX color code in {path}color-invalid-hex-code.less on line 2, column 29:
+1 .a {
+2     @wrongHEXColorCode: #DCALLB;
+3 }

test/less/errors/color-invalid-hex-code2.less

@@ -0,0 +1,3 @@
+.a {
+    @wrongHEXColorCode: #fffblack;
+}

test/less/errors/color-invalid-hex-code2.txt

@@ -0,0 +1,4 @@
+SyntaxError: Invalid HEX color code in {path}color-invalid-hex-code2.less on line 2, column 29:
+1 .a {
+2     @wrongHEXColorCode: #fffblack;
+3 }