kytrinyx/exercism.io — pull request #816 by mjhoy (2013-09-29 19:08:40+00:00)
Title: markdown: don't double-escape ">" and "<" in code blocks

See #416.

I removed the `sanitize_markdown` method call, which will gsub all "<" and ">" with their HTML entities.

When Markdown parsed the file, it kept those entities intact, _unless_ they were in a <pre> or <code> block. Then it escaped them again, so they were doubly-escaped.

I also changed a test which incorrectly expected the doubly-escaped output.

The other tests pass, but does this introduce a XSS vulnerability I'm not seeing?