Italicizing Markdown Links Breaks the Links

[graywolf336]

Your Rocket.Chat version: 0.49.0-develop

Sending the following message text breaks the link:
_[A brand new Gist](https://gist.github.com/24dddfa97bef58f46ac2ce0f80c58ba4)_

[geekgonecrazy]

Yeah I think the regex here is pretty strict. For sure a bug. But, I wonder how common it is to italicize a link 😄

[RichardFoxworthy]

We've hit this problem where we are using italics to differentiate a 'hints and tips' piece of content from more general message content. In our use case we did want to include a link in the hint text but were not able to!

[tntobias]

This happens when a markdown link is contained in a /me message as well.

[DelboyJay]

Just an FYI but someone has created a CVE for this here: https://nvd.nist.gov/vuln/detail/CVE-2017-1000054

Details of exploiting the vulnerability can be found here https://www.theblazehen.com. The link in the CVE description appears to be broken.

[danchr]

AFAICT this bug still exists, but with different results. Entering a string containing an underscore like this:

__[x_x](https://rocket.chat)__

Yields this:

x</em><span class="copyonly">_</span>x__

Rendered like this: