이름에 있는 인용 부호가 인용 마크다운을 깨뜨립니다

zogstrip · 12월 12, 2025, 5:49오후

아쉽게도 그런 방법은 없습니다

가장 단순하고 안전한 방법은 인용 기호를 제거하는 것입니다. 이상적은 아니지만, 깨지는 것보다는 낫지 않을까요?

github.com/discourse/discourse

FIX: strip quotation marks from names in quote BBCode (#36666)

main ← strip-quotation-marks-from-names-in-quote-bbcode

merged 08:46AM - 18 Dec 25 UTC

ZogStriP

+30 -1

When "display name on posts" is enabled and "prioritize username in UX" is disab…led, quoting a user with quotation marks in their display name (e.g., `John "The Dev" Smith`) breaks the quote markdown: [quote="John "The Dev" Smith, post:1, topic:2"] The BBCode parser's regex `"([^"]+)"` stops at the first `"` inside the name, capturing only `John ` instead of the full name. Alternatives considered: - Backslash escaping (`\"`): Would require updating the parser regex to support escape sequences and adding unescape logic. Adds complexity and risks breaking existing quotes. - URL encoding (`%22`): Requires decoding when rendering. Using `decodeURIComponent` on user input creates XSS risk. A safe decoder that only decodes specific characters adds complexity and attack surface for minimal benefit. The simplest solution is to strip quotation marks from names when building the quote BBCode. This is safe (no user input decoding), simple (no parser changes), and the minor cosmetic loss in the quote attribution is an acceptable trade-off. The `stripQuotationMarks` function is defined alongside the existing `QUOTATION_MARKS` array in bbcode-block.js to keep related logic together and avoid duplication. Ref - https://meta.discourse.org/t/391153

글		댓글	조회수
Quoting broken when name matches username Bug	20	2070	4월 26, 2022
Display full name not username when attributing quote in RTE Bug composer	15	296	2월 26, 2026
[quote] loses backslashes on this super edge case Bug markdown-it-review	3	1154	6월 26, 2017
Can a Theme have a quote display real name instead of username? Feature	1	721	2월 13, 2018
"display name on posts" should apply to quotes, too Feature	1	487	2월 25, 2026

이름에 있는 인용 부호가 인용 마크다운을 깨뜨립니다

Related topics