Function applyToNonCodeRegions

actions/setup/js/sanitize_content_core.cjs:545–581

* Applies a transformation function only to the non-code regions of markdown content. * Skips both fenced code blocks (``` / ~~~ delimited) and inline code spans (backtick * delimited) so that the transformation is not applied to code content. * * Falls back to applying fn to the entire string i

(s, fn)

 * @returns {string} The content with the transformation applied only outside code regions
 */
function applyToNonCodeRegions(s, fn) {
  if (!s || typeof s !== "string") {
    return s || "";
  }

  try {
    const codeRanges = getFencedCodeRanges(s);

    if (codeRanges.length === 0) {
      // No fenced code blocks – still protect inline code spans
      return applyFnOutsideInlineCode(s, fn);
    }

    const parts = [];
    let pos = 0;

    for (const [start, end] of codeRanges) {
      if (pos < start) {
        // Non-code text before this code block: protect inline code spans
        parts.push(applyFnOutsideInlineCode(s.slice(pos, start), fn));
      }
      // Fenced code block: preserve verbatim
      parts.push(s.slice(start, end));
      pos = end;
    }

    // Non-code text after the last code block
    if (pos < s.length) {
      parts.push(applyFnOutsideInlineCode(s.slice(pos), fn));
    }

    return parts.join("");
  } catch (_e) {
    // Fallback: apply fn to the entire string (conservative – redacts more, never less)
    return fn(s);
  }
}

/**
 * Removes XML comments from content