mirror of
https://github.com/discourse/discourse.git
synced 2024-12-19 15:25:59 +08:00
126 lines
1.9 KiB
HTML
Executable File
126 lines
1.9 KiB
HTML
Executable File
<!--
|
|
Changed for Discourse:
|
|
|
|
- Our HTML sanitizer escapes quotes " as "
|
|
- Our sanitizer has not whitelisted attr attributes in `span`s
|
|
- Our sanitizer replaces backticks with ` in code blocks
|
|
-->
|
|
<p>These should all get escaped:</p>
|
|
|
|
<p>Backslash: \</p>
|
|
|
|
<p>Backtick: `</p>
|
|
|
|
<p>Asterisk: *</p>
|
|
|
|
<p>Underscore: _</p>
|
|
|
|
<p>Left brace: {</p>
|
|
|
|
<p>Right brace: }</p>
|
|
|
|
<p>Left bracket: [</p>
|
|
|
|
<p>Right bracket: ]</p>
|
|
|
|
<p>Left paren: (</p>
|
|
|
|
<p>Right paren: )</p>
|
|
|
|
<p>Greater-than: ></p>
|
|
|
|
<p>Hash: #</p>
|
|
|
|
<p>Period: .</p>
|
|
|
|
<p>Bang: !</p>
|
|
|
|
<p>Plus: +</p>
|
|
|
|
<p>Minus: -</p>
|
|
|
|
<p>These should not, because they occur within a code block:</p>
|
|
|
|
<pre><code>Backslash: \\
|
|
|
|
Backtick: \`
|
|
|
|
Asterisk: \*
|
|
|
|
Underscore: \_
|
|
|
|
Left brace: \{
|
|
|
|
Right brace: \}
|
|
|
|
Left bracket: \[
|
|
|
|
Right bracket: \]
|
|
|
|
Left paren: \(
|
|
|
|
Right paren: \)
|
|
|
|
Greater-than: \>
|
|
|
|
Hash: \#
|
|
|
|
Period: \.
|
|
|
|
Bang: \!
|
|
|
|
Plus: \+
|
|
|
|
Minus: \-
|
|
</code></pre>
|
|
|
|
<p>Nor should these, which occur in code spans:</p>
|
|
|
|
<p>Backslash: <code>\\</code></p>
|
|
|
|
<p>Backtick: <code>\`</code></p>
|
|
|
|
<p>Asterisk: <code>\*</code></p>
|
|
|
|
<p>Underscore: <code>\_</code></p>
|
|
|
|
<p>Left brace: <code>\{</code></p>
|
|
|
|
<p>Right brace: <code>\}</code></p>
|
|
|
|
<p>Left bracket: <code>\[</code></p>
|
|
|
|
<p>Right bracket: <code>\]</code></p>
|
|
|
|
<p>Left paren: <code>\(</code></p>
|
|
|
|
<p>Right paren: <code>\)</code></p>
|
|
|
|
<p>Greater-than: <code>\></code></p>
|
|
|
|
<p>Hash: <code>\#</code></p>
|
|
|
|
<p>Period: <code>\.</code></p>
|
|
|
|
<p>Bang: <code>\!</code></p>
|
|
|
|
<p>Plus: <code>\+</code></p>
|
|
|
|
<p>Minus: <code>\-</code></p>
|
|
|
|
|
|
<p>These should get escaped, even though they're matching pairs for
|
|
other Markdown constructs:</p>
|
|
|
|
<p>*asterisks*</p>
|
|
|
|
<p>_underscores_</p>
|
|
|
|
<p>`backticks`</p>
|
|
|
|
<p>This is a code span with a literal backslash-backtick sequence: <code>\`</code></p>
|
|
|
|
<p>This is a tag with unescaped backticks <span>bar</span>.</p>
|
|
|
|
<p>This is a tag with backslashes <span>bar</span>.</p>
|