파일명에 밑줄이 있는 경우 첨부파일 마크업 생성 오류

ValdikSS · 4월 7, 2026, 4:26오전

파일 업로드 시 작은 버그를 발견했습니다:

파일이 밑줄로 시작하고 밑줄로 끝나면(_test_file_.txt인 경우), 마크업 생성 코드가 밑줄을 이스케이프하지 않아 다음과 같은 "파일 이름"이 생성됩니다:
_test_file_.txt (23 Bytes)

[_test_file_.txt|attachment](upload://eSJGButIpkpu4IEifmmispiFRJu.txt) (23 Bytes)

첫 번째 밑줄을 백슬래시로 이스케이프하면 올바르게 파싱됩니다:

_test_file_.txt (23 Bytes)

[_test_file_.txt|attachment](upload://eSJGButIpkpu4IEifmmispiFRJu.txt) (23 Bytes)

zogstrip · 4월 7, 2026, 2:33오후

리포트 감사합니다 @ValdikSS 이번 기회에 이 문제를 완전히 해결하기 위한 시도입니다

github.com/discourse/discourse

FIX: Escape markdown characters in upload filenames (#39133)

main ← fix/escape-markdown-in-upload-filenames

merged 08:37AM - 14 Apr 26 UTC

ZogStriP

+160 -59

Filenames containing markdown formatting characters (`_`, `*`, `~`, `` ` ``, `[`…, `]`, `|`) would break upload markup when cooked. For example, uploading `_test_file_.txt` generated: [_test_file_.txt|attachment](upload://...) The underscores triggered emphasis parsing inside the link text, which both rendered the filename incorrectly (with italics) and prevented the `|attachment` marker from being recognized — losing the `class="attachment"` on the resulting `<a>` tag. **Markdown generation (defense in depth)** Add `escapeMarkdownCharacters` (JS) and `UploadMarkdown.escape_markdown` (Ruby) to backslash-escape all inline formatting characters in filenames before embedding them in markdown link text. Applied in: - `UploadMarkdown` — image, attachment, and playable media methods - `uploads.js` — `attachmentMarkdown` and `markdownNameFromFileName` - `inline_uploads.rb` — HTML anchor conversion and hotlinked image URLs - `to-markdown.js` — HTML-to-markdown attachment link reconstruction - `sanitizeAlt` in `markdown-image-builder.js` — image alt text **Parser resilience (belt and suspenders)** The markdown-it `renderAttachment` renderer and ProseMirror's link parser both assumed `tokens[idx+1]` was a single text token containing the full link text. When emphasis/bold/strikethrough/code was parsed inside the link text, the token sequence included formatting tokens and the `|attachment` marker was lost. Both now scan forward through all tokens between `link_open` and `link_close` to find the marker. The image renderer (`renderImageOrPlayableMedia`) split alt text on `|` assuming the first segment was always the alt and everything after was structured suffixes (dimensions, video/audio, data attributes). A pipe in the filename would produce extra segments that confused the dimension parser. It now scans from the right, consuming known suffixes, and treats everything remaining as alt text. https://meta.discourse.org/t/400079

글		댓글	조회수
Some links are misinterpreted Bug	6	801	8월 8, 2022
Double-escaping of underscores in image alt text corrupts post raw on each edit Support	2	107	4월 23, 2026
Links broken with (at least) two underscores in URL Bug	9	2194	6월 15, 2022
Links with underbars surrounded by hyphens render incorrectly Bug	1	805	9월 24, 2018
A comma followed by an underscore in a URL results in defunct link Bug markdown-it-review	5	2925	6월 26, 2017

파일명에 밑줄이 있는 경우 첨부파일 마크업 생성 오류

Related topics