On Feb 20, 2008, at 9:58 PM, Bertrand Mansion wrote:
This would indeed solve one part of the problem. Another cleaner
solution consists in escaping special html characters (also in
links urls).
For example, you should make sure that this markdown: [click here](http://example.com/?url=
">) is translated to :
<a href="http://example.com/?url=">">click here</a> and not
<a href="http://example.com/?url=">">click here</a> otherwise, you
are prone to XSS attacks and things related.
<p><a href="http://example.com/?url="">click here</a> </p>
http://nanoki.luaquiz.com:1080/code
Is it what you meant?