[DOXIA-726] MarkdownSink: Incorrect escaping of <,>,",' and &

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.0-M9
• Fix Version/s: 2.0.0, 2.0.0-M10
• Component/s: Module - Markdown
• Assignee: Konrad Windszus
• Reporter: Konrad Windszus
• Created: 16/Jan/24 18:22
• Updated: 14/Apr/24 09:30
• Resolved: 17/Jan/24 09:07

Description

As Markdown emits all unknown characters "as-is" in the resulting HTML also all XML escape characters need to be leveraged in addition to the ones outlined in https://daringfireball.net/projects/markdown/syntax#backslash in Sink.text(...). Currently only the latter is considered though which leads to incorrect output: The text value

"this is a <test>"

should lead to

"this is a <test>"

but right now the "<" and ">" are not escaped.
Compare also with https://spec.commonmark.org/0.30/#entity-and-numeric-character-references.

It needs to be ensured that all parsed XHTML elements which are not natively supported by the Sink API (i.e. don't lead to a dedicated event) are passed as is to the output (given the input is XHTML).

Issue Links

• relates to: DOXIA-692 Markdown Sink: Incorrect escape characters
• links to: GitHub Pull Request #196