Skip to content

GitLab

Closed
Created by Administrator@rootOwner

Issue titles don't escape valid entities: &lt; shows as <

Created by: cirosantilli

When I write:

&lt;

On the issue title, I expect it to render as:

&amp;lt;

but it currently renders:

&lt;

This only happens for valid entities, e.g. &asdf; renders as &amp;asdf; as expected: I think the problem is with the escape_once at: https://github.com/gitlabhq/gitlabhq/pull/8329. Couldn't we use html_escape instead?

The best behaviour in fact would be to have no markdown magic like references nor emoji on titles because it is not possible to escape them like it is on normal markdown.