fix several rendering issues in markdown (#3588)

- fix double escaping of html entities: " instead of "
- fix table is missing css class "table"
- fix quotes are not rendered

src/Twig/Runtime/MarkdownExtension.php

@@ -63,7 +63,7 @@ final class MarkdownExtension implements RuntimeExtensionInterface
         if ($this->isMarkdownEnabled()) {
             $content = $this->markdown->toHtml($content);
         } elseif ($fullLength) {
-            $content = '<p>' . nl2br($content) . '</p>';
+            $content = '<p>' . nl2br(htmlspecialchars($content)) . '</p>';
         }
 
         return $content;
@@ -115,7 +115,7 @@ final class MarkdownExtension implements RuntimeExtensionInterface
             return $this->markdown->toHtml($content);
         }
 
-        return nl2br($content);
+        return nl2br(htmlspecialchars($content));
     }
 
     /**

src/Twig/RuntimeExtensions.php

@@ -45,8 +45,8 @@ class RuntimeExtensions extends AbstractExtension
     {
         return [
             new TwigFilter('md2html', [MarkdownExtension::class, 'markdownToHtml'], ['pre_escape' => 'html', 'is_safe' => ['html']]),
-            new TwigFilter('desc2html', [MarkdownExtension::class, 'timesheetContent'], ['pre_escape' => 'html', 'is_safe' => ['html']]),
+            new TwigFilter('desc2html', [MarkdownExtension::class, 'timesheetContent'], ['is_safe' => ['html']]),
-            new TwigFilter('comment2html', [MarkdownExtension::class, 'commentContent'], ['pre_escape' => 'html', 'is_safe' => ['html']]),
+            new TwigFilter('comment2html', [MarkdownExtension::class, 'commentContent'], ['is_safe' => ['html']]),
             new TwigFilter('comment1line', [MarkdownExtension::class, 'commentOneLiner'], ['pre_escape' => 'html', 'is_safe' => ['html']]),
             new TwigFilter('colorize', [ThemeExtension::class, 'colorize']),
         ];

src/Utils/ParsedownExtension.php

@@ -18,7 +18,7 @@ class ParsedownExtension extends \Parsedown
 
     /**
      * Overwritten to prevent # to show up as headings for two reasons:
-     * - Hashes are often used to cross link issues in other systems
+     * - Hashes are often used to cross-link issues in other systems
      * - Headings should not occur in time record listings
      */
     protected $BlockTypes = [
@@ -146,4 +146,17 @@ class ParsedownExtension extends \Parsedown
 
         return $text;
     }
+
+    protected function blockTable($Line, array $Block = null)
+    {
+        $Block = parent::blockTable($Line, $Block);
+
+        if (\is_null($Block)) {
+            return;
+        }
+
+        $Block['element']['attributes']['class'] = 'table';
+
+        return $Block;
+    }
 }

tests/Twig/RuntimeExtensionsTest.php

@@ -80,12 +80,10 @@ class RuntimeExtensionsTest extends TestCase
                     $found_md2html = true;
                     break;
                 case 'desc2html':
-                    self::assertEquals('html', $filters[1]->getPreEscape());
                     self::assertEquals(['html'], $filters[1]->getSafe(new Node()));
                     $found_desc2html = true;
                     break;
                 case 'comment2html':
-                    self::assertEquals('html', $filters[2]->getPreEscape());
                     self::assertEquals(['html'], $filters[2]->getSafe(new Node()));
                     $found_comment2html = true;
                     break;