search

dbramucci / almu575

A simple markup language for writing algorithms.
MIT License
0 stars 0 forks source link

Escaping user input during compilation #2

Open dbramucci opened 6 years ago

dbramucci commented 6 years ago

Currently, escaping for rendered HTML is done by using blaze's built in process. This does not cover what Mathjax does, it appears that $ and $$ should be escaped by the almu575 compiler. Is this sufficient and if not, what else should be sanitized or sent unsanitized to the final output.

dbramucci commented 6 years ago

Just for reference, here's a stack overflow question on escaping $s.

https://stackoverflow.com/questions/8773586/mediawiki-mathjax-need-to-use-escape-x