Description: ------------ Instead of 1 link it give me broken html with 2 links This also allow to do XSS attacks Test script: --------------- Input code: [url=http://malware.testing.google.test/testing/malware/]Your text to link here...[/url]http://malware.testing.google.test/testing/malware/ Expected result: ---------------- <a href='http://malware.testing.google.test/testing/malware/'>Your text to link here... </a>http://malware.testing.google.test/testing/malware/ Actual result: -------------- <a href='http://malware.testing.google.test/testing/malware/'>Your text to link here...</a><a href='http://malware.testing.google.test/testing/malware/'>http:/ /malware.testing.google.test/testing/malware/</a>

The parser accepts also urls without [url] tags. That is a feature, not a bug.