discord-html not escaping HTML code blocks when lacking a language identifier
ImpactAny website using discord-markdown with user-generated markdown is vulnerable to having code injected into the page where the markdown is displayed.PatchesThis has been patched in version 2.3.1WorkaroundsEscape the characters `&lt;&gt;&amp;` before sending plain code blocks to discord-markdown.Referenceshttps://github.com/brussell98/discord-markdown/issues/13