3 ms·
> there is no movement to tighten the bolts on Markdown Oh but there was one, and it was desperately needed! Gruber's original implementation was absolutely r
by blasdel 13y ago
> there is no movement to tighten the bolts on Markdown
Oh but there was one, and it was desperately needed!
Gruber's original implementation was absolutely riddled with logical inconsistencies, outright bugs, and even an escaping vulnerability that was exploited by an XSS worm to self-replicate on Reddit.
This project originally started as a PHP transliteration of Gruber's pile of regexes, and it's early version history is a nice summary of all the warts as they were discovered (and never fixed upstream): http://michelf.ca/projects/php-markdown/classic/#version-history http://michelf.ca/projects/php-markdown/classic/#version-his...