Smart typography invalidates contents of <script>

fletcher / peg-multimarkdown

An implementation of MultiMarkdown in C, using a PEG grammar - a fork of jgm's peg-markdown. No longer under active development - see MMD 5.

Other

523 stars 55 forks source link

Closed fletcher closed 13 years ago

fletcher commented 13 years ago

eg:

<script type="text/javascript">
eval(unescape('%66%75%6E%63%74%69%6F%6E%20%70%67%72%65%67%67%5F
...
</script>

fletcher commented 13 years ago

Turns out this is an effect from peg-markdown. Forwarded to John MacFarlane.

fletcher commented 13 years ago

Fixed - thanks, John!