XSS vulnerability

[haampie]

See for instance

http://laravel.io/forum/01-31-2014-how-to-mark-up-forum-posts?page=2#reply-5891

It is possible to create javascript links with [some text](javascript:alert('xss'))

[barryvdh]

So is that in this forum, or is that a bug in the markdown parser (michelf/php-markdown)?
See also: michelf/php-markdown#160, michelf/php-markdown#156, michelf/php-markdown#106 etc

[GrahamCampbell]

You could always shove the output from php-markdown through my robust xss protector https://github.com/GrahamCampbell/Laravel-Security.

[driesvints]

Fixed in #163