Consider specifying a format for links embedded in plain text messages

["Mr. Michael Fanning" <michael.fanning@microsoft.com>]

Please see a newly filed issue that specifically addresses the notion of adding embedded links in SARIF plain text messages. The primary driver for proposing markdown was to enable this requested feature. Markdown support brings its own issues (notably increasing the danger of script injection, for one). As an alternate to opting into markdown in its entirety, we could design an embedded link feature into SARIF, perhaps based on the markdown format.

Comments and feedback appreciated. Luke, I'm sure it would be valuable for you to weigh in.

Personally, I'm beginning to favor dropping the notion of markdown and implementing this specific idea on its own. An additional strike against markdown is that I haven't seen that a broad range of viewers/potential consumers are prepared to adopt it.

Michael

https://github.com/oasis-tcs/sarif-spec/issues/61