tgalopin / html-sanitizer

Sanitize untrustworthy HTML user input
MIT License
390 stars 41 forks source link

< and > characters are being removed, even if they're not associated with a tag #77

Open kirkbushell opened 5 months ago

kirkbushell commented 5 months ago

Having a problem here due to supporting markdown - quote characters (>) and other characters (<) are being removed, even if it's not a full tag.

Ie. this text will have the less than character removed: "< 18" - which becomes just " 18".

Finally, is there a reason why b tags are being replaced with strong tags? This isn't a sanitisation mechanism.