Special characters are not escaped, e.g. in submission titles

[o11c]

I experienced this with a title containing unbalanced ]s, but a quick glance at the code shows a lot more potential injection problems.

You should probably use a proper markdown model rather than concatenating the strings in the first place, but it's tricky since there are so many dialects floating around, including 2 on Reddit itself ...