search

dracidoupe / graveyard

Open Source reimplementation of https://www.dracidoupe.cz/
https://nove.dracidoupe.cz/
MIT License
6 stars 4 forks source link

Bad HTML escaping if closing tag follows an entity / when pair tags are not properly closed #182

Closed Almad closed 3 years ago

Almad commented 3 years ago
image
Almad commented 3 years ago

The problem is elsewhere: there is unclosed <i>, which then cause </p> to be escaped.

Almad commented 3 years ago

The original v1 version renders <i>, but then doesn't escape the closing </p>.

This is interpreted by the browser as making the rest of the comment / paragraphs in italic.

IMHO the correct behavior is to escape the unclosed <i> as the least worst solution.