Uploaded image for project: 'Bitbucket Data Center'
  1. Bitbucket Data Center
  2. BSERV-4516

Markdown links have overly aggressive XSS protection?

XMLWordPrintable

    • Icon: Suggestion Suggestion
    • Resolution: Won't Fix
    • None
    • None
    • None
    • We collect Bitbucket feedback from various sources, and we evaluate what we've collected when planning our product roadmap. To understand how this piece of feedback will be reviewed, see our Implementation of New Features Policy.

      If I want to link to this page on wikipedia, I can't: http://en.wikipedia.org/wiki/You_aren't_gonna_need_it

      It's because of the apostrophe in the URL.

      If I write the following markdown: 

      Yay for [YAGNI](http://en.wikipedia.org/wiki/You_aren't_gonna_need_it)!

      I end up with an <a> with no link.

          Form Name

            [BSERV-4516] Markdown links have overly aggressive XSS protection?

            Roger Barnes (Inactive) added a comment -

            Hi Chris,

            This does appear to be a limitation in the markdown library we are using. For the time being I'm going to close this as it's unlikely we'll get to fixing it soon and there's a workaround available. If the issue is reported again we'll reconsider.

            Roger Barnes (Inactive) added a comment - Hi Chris, This does appear to be a limitation in the markdown library we are using. For the time being I'm going to close this as it's unlikely we'll get to fixing it soon and there's a workaround available. If the issue is reported again we'll reconsider.

            Roger Barnes (Inactive) added a comment - - edited

            This does seem to be a quirk of our markdown parser, since unescaped apostrophe is valid in URLs

            FWIW, this does work: 

            Yay for [YAGNI](http://en.wikipedia.org/wiki/You_aren%27t_gonna_need_it)!

            Roger Barnes (Inactive) added a comment - - edited This does seem to be a quirk of our markdown parser, since unescaped apostrophe is valid in URLs FWIW, this does work: Yay for [YAGNI](http://en.wikipedia.org/wiki/You_aren%27t_gonna_need_it)!

              Unassigned Unassigned
              cdarroch Daz
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: