Right now Lemmy is unusable for writing code that contains less than/greater than signs because Lemmy’s sanitizer treats that as potentially malicious HTML code.
Here’s an example:
if(x < y)
{
/* ... */
}
The listing becomes littered with < gibberish.
Yeah I think this was hastily done to prevent the XSS injection attacks that were happening IIRC. But it was implemented a little sloppily, imo.
This could have been avoided by just restricting the encoding to when the user types content in (and before database insertion), and decoding when showing the content in the UI.