diff --git a/JobTrackerApi.Tests/CvBuilderTests.cs b/JobTrackerApi.Tests/CvBuilderTests.cs
index b696ad4..b7e6917 100644
--- a/JobTrackerApi.Tests/CvBuilderTests.cs
+++ b/JobTrackerApi.Tests/CvBuilderTests.cs
@@ -124,6 +124,46 @@ public sealed class CvBuilderTests
Assert.DoesNotContain("class=\"sidebar\"", minimal.Html);
}
+ [Fact]
+ public void Bullets_support_safe_inline_markdown_and_escape_everything_else()
+ {
+ var renderer = new ThemedCvRenderer();
+ var profile = new StructuredCvProfile { Summary = { "**bold** and *italic* and __under__ and [site](https://x.io) " } };
+ var model = CvVariantResolver.Build(profile, new CvVariantSettings(), "F", null);
+ var html = renderer.Render(model, CvThemeCatalog.Resolve("modern"), new CvVariantSettings { ThemeId = "modern" }).Html;
+ Assert.Contains("bold", html);
+ Assert.Contains("italic", html);
+ Assert.Contains("under", html);
+ Assert.Contains("site", html);
+ Assert.Contains("<script>", html); // the real tag is escaped, inert
+ Assert.DoesNotContain("