Results 3 comments of Arkango

@agusmakmun I tested the regex https://regex101.com/r/fUvNyq/1 with our payload executed here https://github.com/agusmakmun/django-markdown-editor/blob/master/martor/utils.py#L33 there isn't a match edit the regex to properly identify links and avoid \

Well if you replace .* and .+ with only valid url characters like this [^-\]_.~!*'();:@&=+$,/?%#[A-z0-9] , look at this solution proposed here https://stackoverflow.com/questions/22038142/regex-for-valid-url-characters no backslash is included

In the preview it is also possible, or there is another way to intercept the selection in the preview panel ? @seamus-45 @sn3p