vmg / sundown

Standards compliant, fast, secure markdown processing library in C
1.99k stars 385 forks source link

Make sure www-autolink text is entity-escaped. #74

Closed spladug closed 12 years ago

spladug commented 12 years ago

HTML's rndr_link assumes the text is already escaped because it's usually run through parse_inline. This is not true when it's called via www-autolink.

This runs the text through normal_text to ensure the text is entity-escaped properly.