3 ms·
(author here) That's a very similar problem, but it looks like it's sloppy about escaping. Correct me if I'm wrong, but you could have a change description tha
by chubot 9y ago
(author here) That's a very similar problem, but it looks like it's sloppy about escaping. Correct me if I'm wrong, but you could have a change description that looks like:
Fix escaping of \*.
And it wouldn't be printed correctly because it conflicts with Markdown's own escaping.
$ echo 'Fix escaping of \*' |markdown
<p>Fix escaping of *</p>
Or:
Fix parsing of a[i]()
$ echo 'Fix parsing of a[i]()' | markdown
<p>Fix parsing of a<a href="">i</a></p>
In other words, you have a "markdown injection attack" (which is probably not very consequential, but it leads to bad output.). The whole point of this exercise is that the escaping is 100% correct.
- mattdeboard 9y agoSure, understood.