I don't know the technicalities, but Markdown supports links, and it's possible to craft a link that downloads a file and then executes it. You can look up the Notepad.exe RCE vulnerability from this year.
Sweet. I've been a tiny enthusiast of Markdown for almost 20 years. It's just a great format.
I host a forum for a gaming community and it uses BBcode, which was... not completely terrible for the time, but ever since I used markdown, I've always hated it. heh. Markdown is just simple and easy to remember, and it's easy to use. It quickly becomes second nature.
13 Comments
ClassyHatter@sopuli.xyz · 59 pts · 168d
Hopefully it doesn't have any Remote Code Execution vulnerabilities, like Microslop's implementation had.
jdnewmil@lemmy.ca · 25 pts · 168d
How in the world did they manage that? Did they implement it internally as a TCP API and expose it?
ClassyHatter@sopuli.xyz · 34 pts · 168d
I don't know the technicalities, but Markdown supports links, and it's possible to craft a link that downloads a file and then executes it. You can look up the Notepad.exe RCE vulnerability from this year.
thorhop@sopuli.xyz · 22 pts · 168d
Basically Notepad would pass the link to ShellEx and could launch executables.
warmaster@lemmy.world · 28 pts · 167d
It was like:
jol@discuss.tchncs.de · 5 pts · 167d
They probably vibe coded it, and only copilot reviewed and merged the code.
mogoh@lemmy.ml · 25 pts · 167d
I really hate that every markdown engine has its own flavor and I hope for a better standardization.
There is commonmark but it is lacking features like tables. https://commonmark.org/
Zerush@lemmy.ml · 7 pts · 167d
Yes, it's a nice, easy and elegant system, but lacks still a lot of possibilities included in the BBcode.
NONE_dc@lemmy.world · 21 pts · 168d
HELL YEAH!
daychilde@lemmy.world · 12 pts · 167d
Sweet. I've been a tiny enthusiast of Markdown for almost 20 years. It's just a great format.
I host a forum for a gaming community and it uses BBcode, which was... not completely terrible for the time, but ever since I used markdown, I've always hated it. heh. Markdown is just simple and easy to remember, and it's easy to use. It quickly becomes second nature.
Vex_Detrause@lemmy.ca · 10 pts · 168d
I've been using markdown and I don't even know. Sounds like a great addition.
To lemmy like me. Markdown is another way of formatting text. It's like the R*ddit or lemmy way of formatting.
muvon@discuss.tchncs.de · 9 pts · 168d
About time too!
jcr@jlai.lu · 4 pts · 168d
I plan to export all the company documentation to markdown for git/bazaar based version control ! It is just so exciting 🥳😁
aproposnix@scribe.disroot.org · 2 pts · 167d