mrdevel2002-ui commented on PR #3559:
URL: https://github.com/apache/tika/pull/3559#issuecomment-6856454197

   That covers it. I ran this PR's payloads against main after #3561 with 
`class="math"`, `"math inline"` and `"math display"` and rendered through 
commonmark's `HtmlRenderer`. The bare `math` class (the tagged-PDF custom type 
case) now goes out as escaped text, so the trailing `<` that used to pull the 
following text into a tag comes out as `\<`. Real math spans land in the code 
span, and backtick and `$$<script>` variants stay inside it. No raw `<img>`, 
`<script>`, comment or `javascript:` link survived in any of them. The code 
span is also the better trade-off, since it doesn't add the stray space after 
`<` that non-math readers would show. Fine to close this one.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to