Markdown preview and result differ

Bug
1

Per Creating bug reports for Discourse on Meta

try.discourse.org

image
image1524Ɨ1185 131 KB

https://try.discourse.org/t/word1-word2-word3-word4/1430?u=rokejulianlockhart

discuss.kde.org

https://discuss.kde.org/t/difference-between-preview-and-actual-post/1245/2?u=rokejulianlockhart

1 Like
2

Hi @rokejulianlockhart

I can repro it and the preview indeed differs from the post. :slight_smile:

The empty line below or above your tags plays a little role here but itā€™s not important. If you remove them, it will wrap the closest next and previous content, but not the whole content.

no empty lines Additionally, how come 
import QtQuick
import QtQuick.Controls 2.15 as QQC2
import QtQuick.Layouts
import QtPositioning

and prepension of QQC2 before Action, Button, ApplicationWindow, and Frame doesnā€™t work, whereas

import QtQuick
import QtQuick.Controls
import QtQuick.Layouts
import QtPositioning
import QtQuick.Controls 2.15 as QQC2

and addition of QQC2.Button (per [qml+pyqt6] Can't get native control appearance - #2 by carl - Help - Discuss) does?
A new line

image
image772Ɨ462 24.8 KB

That saidā€¦
I thought the issue was because <strike>[1] was an inline element. I can repro it with other tags such as <b> or <i>, but not <strong>, <em>. So itā€™s not because itā€™s an inline-level element. Discourse allows wrapping blocks with inlines, from what I can see with <strong> or <em>.

<strong> 
<strong>

Additionally, how come

```qml
import QtQuick
import QtQuick.Controls 2.15 as QQC2
import QtQuick.Layouts
import QtPositioning
```

and prepension of `QQC2` before `Action`, `Button`, `ApplicationWindow`, and `Frame` doesn't work, whereas

```qml
import QtQuick
import QtQuick.Controls
import QtQuick.Layouts
import QtPositioning
import QtQuick.Controls 2.15 as QQC2
```

and addition of `QQC2.Button` (per https://discuss.kde.org/t/qml-pyqt6-cant-get-native-control-appearance/1240/2?u=rokejulianlockhart) does?
A new line

</strong>

image
image768Ɨ479 34.9 KB

It seems not to be related to authorized tags, since Discourse accepts all these tags (<strike>, <s>, <b>, <strong>, <i>, <em>ā€¦).

It seems not to be a markdown-it quirk either, since I canā€™t reproduce the issue in their demo.

  1. Note that <strike> is deprecated in favor of <s> . A detail that wonā€™t change anything in this issue, but always good to knowā€¦ I just learned it right now after all :smile: ā†©ļøŽ

5 Likes
4

Took a quick look out of curiosity. It looks like an issue with the Nokogiri library. :thinking:

image
image1115Ɨ334 25.6 KB

From what uses Discourse here:

Loofah.fragment uses Nokogiriā€™s HTML4 parser.

This could be fixed using Loofah.html5_fragment as long as Nokogiri >= 1.14.0 and Loofah >= 2.21.0. Discourse already uses Nokogiri::HTML5.fragment; that would make sense.

Note: Loofah 2.21.0 is not yet released; currently in RC1.

11 Likes
5

Fantastic debugging! Thanks
:pray:

6 Likes
6

going to bookmark this for 30 days, hopefully then the new loofah is out and we can simply upgrade it.

2 Likes
8

I just tried the HTML5 version of loofah and we are hitting a security issue it seems:


  1) PrettyText provides safety for img bbcode
     Failure/Error: expect(cooked).to eq(html)
     
       expected: "<p><img src=\"http://aaa.com&lt;script&gt;alert(1);&lt;/script&gt;\" alt=\"\" role=\"presentation\"></p>"
            got: "<p><img src=\"http://aaa.com<script>alert(1);</script>\" alt=\"\" role=\"presentation\"></p>"
     
       (compared using ==)
     # ./spec/lib/pretty_text_spec.rb:2150:in `block (2 levels) in <main>'
     # ./spec/rails_helper.rb:358:in `block (2 levels) in <top (required)>'
     # /home/sam/.gem/ruby/3.2.1/gems/webmock-3.18.1/lib/webmock/rspec.rb:37:in `block (2 levels) in <top (required)>'

This one feels very risky to meā€¦ will raiseā€¦

3 Likes
9

Many thanks for your debugging! Weā€™ve fixed this with:

as seen here:

Additionally, how come

import QtQuick
import QtQuick.Controls 2.15 as QQC2
import QtQuick.Layouts
import QtPositioning

and prepension of QQC2 before Action, Button, ApplicationWindow, and Frame doesnā€™t work, whereas

import QtQuick
import QtQuick.Controls
import QtQuick.Layouts
import QtPositioning
import QtQuick.Controls 2.15 as QQC2

and addition of QQC2.Button (per [qml+pyqt6] Can't get native control appearance - #2 by carl - Help - KDE Discuss) does?

4 Likes
10

This topic was automatically closed after 2 days. New replies are no longer allowed.