vmg / sundown

Standards compliant, fast, secure markdown processing library in C
1.99k stars 385 forks source link

Entity-escape link hrefs. #54

Closed spladug closed 12 years ago

spladug commented 12 years ago

The href attribute on links was not being entity-escaped in the HTML renderer. Links with ampersands were getting through, resulting in invalid markup. This adds escaping to regular and automatic link hrefs.

(sorry, not sure if you'd prefer all these pulls separated out like this or merged together; hope you don't feel I'm spamming you :)

vmg commented 12 years ago

Feel free to merge the pulls together -- whatever you feel more convenient. Either way, this is far from spam. Much appreciated fixes. Cheers.