Normal "quotes" are not escaped

[dereuromark]

Not sure if thats a problem for normal use cases, but using HTML escaping
or h() in CakePHP
you get

Some "<b>demo</b>" string

transformed into

Some "<b>demo</b>" string

with >/</" escaped

But with this BBCode parser the " remain it seems:

Some "<b>demo</b>" string

Depending on where those chars appear it could break some layouts maybe. But not sure.

I tried to first escape h($text) before adding it into the converter, but then the tags needing " characters to work wont parse anymore.

[dereuromark]

The issue can be seen here: https://github.com/dereuromark/cakephp-markup/blob/master/tests/TestCase/Bbcode/DecodaBbcodeTest.php#L42

[alquerci]

There is one test case for that so it is expected for now.

https://github.com/milesj/decoda/blob/e84411a/tests/Decoda/DecodaTest.php#L247

[dereuromark]

I wonder if this could break some HTML or have other side effects.

[alquerci]

It only make issue on tag attributes value.

Except I miss something.