PSA: Did you know that it’s **unsafe** to put code diffs into your commit messages?

Like https://github.com/i3/i3/pull/6564 for example

Such diffs will be applied by patch(1) (also git-am(1)) as part of the code change!

This is how a sleep(1) made it into i3 4.25-2 in Debian unstable.

@zekjur i wonder if this works when the diff is hidden within a markdown comment <!— like this —>

That could be an extremely bad vulnerability

@codecat @zekjur this is a HTML comment.
@funbaker yes those work in markdown

@funbaker ...and markdown is usually superset of HTML

@codecat @zekjur

@mo @codecat @zekjur it isn't, but it can afaik inline HTML
@mo @funbaker @codecat @zekjur or more like html just does what markdown in it's default specification can't.

implementing markdown parser and not doing html would be painful