@crazyeddie@mastodon.social @lightbites@kinkycats.org @zekjur@mas.to It's really clear that the developer ("orestisfl") did do testing. And yes, xUnit automated testing would avoid the "diff markers in comments" problem. … But, like others, I find it *inexcusable* that the tools interpret "commands" that they think they find in comments. That kind of sloppiness is just like SQL injection and cross-site scripting bugs. It's not much of a security risk. But it's still a serious BUG.