Edge cases#

Entities and raw characters#

Known entities pass through: & < > " © —

Unknown ones are escaped: &nbsp; &mdash; &notanentity;

Bare characters are escaped: a < b, x & y, 5 > 3.

Unsafe URLs#

javascript and data are neutralised, while https and mailto and relative are not.

unsafe image

https://example.com/path?query=1&other=2 and someone@example.com.

Inline HTML#

A paragraph with inline tags and more in it.

This block is raw.

[just brackets], [unresolved][nope], and ![not an image](.

defined and collapsed and shortcut.

Headings that repeat#

Notes#

Notes#

Notes#

Hard breaks#

line one
line two
line three

Empty things#