MD4C accepts too long numeric character references

mity / md4c

C Markdown parser. Fast. SAX-like interface. Compliant to CommonMark specification.

MIT License

787 stars 146 forks source link

Closed mity closed 5 years ago

mity commented 5 years ago

Spec version 0.29 changed maximal allowed length of numeric character references.

Input:

&#87654321;

Expected output:

<p>&amp;#87654321;</p>

Actual output:

<p>�</p>