Code between < and > in code blocks disappears when opened for editing

[ilyapopov]

When creating a comment, I can type code containing <...> within a backtick code clock. However, when I open this comment for editing, code between < and > disappears.

[paskal]

Couldn't reproduce it on the current version.


Could you please try to reproduce it on the https://remark42.com/demo/, and if you can, try different browsers just to rule out if it's front-end of back-end issue?

[ilyapopov]

I have just reproduced it on demo site. I entered

`foo<bar>`

and after I clicked "edit" I see

`foo`

My browser is Firefox 98.0.2 on Linux. I have also reproduced it on Chromium 99.0.4844.84

[paskal]

I can reproduce it on https://remark42.com/demo/ and I don't see any requests sent to the backend before the text appears on screen, I assume that might be a frontend bug. @akellbl4 can you please look into it?

[akellbl4]

@paskal it's backend related. Probably backend sanitizing HTML tags.
We send comment text as it is to the backend.

FE sends right data:

BE returns without part of the text:

[akellbl4]

@paskal okay, I figured out the problem that is described.
It's still the BE related in this case.
I have text with the whole content and orig without part of the content.

[paskal]

The issue's root cause is the following line:

c.Orig = p.Sanitize(c.Orig)

We need to figure out if we want to sanitize the "orig" field or if it's okay to leave it as-is as the "text" is already sanitised.