You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When an incorrect or unsupported language is specified for a code block using the "Code Syntax Highlighting Plugin," the HTML content within the code block is rendered directly into the page instead of being displayed as plain text.
To Reproduce
Steps to reproduce the behavior:
Go to the "With All Plugins" example on the documentation site/demo.
Scroll down to the "Code Syntax Highlighting Plugin" section.
In the left-hand editor pane (the input area), enter a code block with wrong as the language specifier, but include HTML content within it. For example:
The HTML content within the code block should be displayed as plain text, with syntax highlighting applied if the specified language is valid and supported. It should not be rendered by the browser as live HTML.
Screenshots
Additional context
This issue affects the "Code Syntax Highlighting Plugin." Rendering arbitrary HTML from code blocks can lead to unexpected UI changes and potential security vulnerabilities if untrusted input is processed. The plugin should sanitize or escape HTML within code blocks to ensure it's displayed as text.
The text was updated successfully, but these errors were encountered:
Describe the bug
When an incorrect or unsupported language is specified for a code block using the "Code Syntax Highlighting Plugin," the HTML content within the code block is rendered directly into the page instead of being displayed as plain text.
To Reproduce
Steps to reproduce the behavior:
wrong
as the language specifier, but include HTML content within it. For example:Expected behavior
The HTML content within the code block should be displayed as plain text, with syntax highlighting applied if the specified language is valid and supported. It should not be rendered by the browser as live HTML.
Screenshots
Additional context
This issue affects the "Code Syntax Highlighting Plugin." Rendering arbitrary HTML from code blocks can lead to unexpected UI changes and potential security vulnerabilities if untrusted input is processed. The plugin should sanitize or escape HTML within code blocks to ensure it's displayed as text.
The text was updated successfully, but these errors were encountered: