Adversarial Citation Payload

Adversarial Citation Payload

A JS citation must vanish.

A data citation must vanish.

A protocol-relative citation must vanish.

An unsafe markdown link [Click Me](javascript:alert(2)) must degrade to text.

A safe one Consumer Reports must become a link.

Two in one line: alpha.example.com and beta.example.com done.

Inside a link: anchor with [Source: https://nested.example.com/n] inside.

Verbatim: [Source: https://code.example.com/verbatim] stays.

[Source: https://pre.example.com/verbatim]

Second H1 must also demote

Leave a Comment

Your email address will not be published. Required fields are marked *

Scroll to Top