search

edemaine / coauthor

Coauthor supercollaboration/discussion forum
MIT License
249 stars 34 forks source link

Escape names in @mention expansion #516

Closed edemaine closed 3 years ago

edemaine commented 3 years ago

Currently, HTML gets included in message title/body, but (correctly) not in UserLink.

Also should probably forbid ` and * and \ and other Markdown things from usernames?