Phase 1: Replace Parsedown with league/commonmark (4 call sites)

TODO.md

@@ -7,7 +7,7 @@
 - [x] Wire vendor/autoload.php into app/bootstrap.php
 - [x] Update phpstan.neon (scanDirectories replaces manual Parsedown scan)
 - [x] Write docs/system-setup.md (PHP extension requirements)
-- [ ] Phase 1: Replace Parsedown with league/commonmark (4 call sites)
+- [x] Phase 1: Replace Parsedown with league/commonmark (4 call sites)
 - [ ] Phase 2: Replace PeerTubeService HTTP client with Guzzle
 - [ ] Phase 3: Replace SmtpRelay SMTP socket with PHPMailer
 - [ ] Phase 4 (optional): Replace Crypto with defuse/php-encryption

app/public/admin/form-help-inline-fragment.php

@@ -12,6 +12,8 @@ require_once __DIR__ . '/../../src/AdminAuth.php';
 AdminAuth::requireLogin();
 require_once __DIR__ . '/../../src/Database.php';
 
+use League\CommonMark\CommonMarkConverter;
+
 if (empty($_SESSION['csrf_token'])) {
     $_SESSION['csrf_token'] = bin2hex(random_bytes(32));
 }
@@ -91,10 +93,8 @@ function renderCollapsed(Database $db, string $key): void
 
     $mdHtml = '';
     if ($hasContent) {
-        require_once APP_ROOT . '/src/Parsedown.php';
+        $converter = new CommonMarkConverter(['html_input' => 'strip']);
-        $pd = new Parsedown();
+        $mdHtml = $converter->convert($content)->getContent();
-        $pd->setSafeMode(true);
-        $mdHtml = $pd->text($content);
     }
     ?>
     <div class="fhb-inline <?= $enabled ? '' : 'fhb-inline--disabled' ?>" data-key="<?= htmlspecialchars($key) ?>">

app/src/Controllers/AboutController.php

@@ -1,10 +1,11 @@
 <?php
 
 require_once APP_ROOT . '/src/Database.php';
-require_once APP_ROOT . '/src/Parsedown.php';
 require_once APP_ROOT . '/src/ErrorHandler.php';
 require_once APP_ROOT . '/src/EmailObfuscator.php';
 
+use League\CommonMark\CommonMarkConverter;
+
 class AboutController
 {
     private string $defaultContent = "Ce site XAMXAM a été créé pour répertorier et valoriser les mémoires de l'erg – École de Recherches Graphiques de Bruxelles.\n\nL'objectif est à la fois d'offrir une vitrine aux projets des anciennes étudiantes et de mettre en lumière la diversité des disciplines et des parcours qui façonnent l'histoire de l'école à travers les âges, depuis près de 100 ans.";
@@ -31,12 +32,11 @@ class AboutController
             $contacts   = null;
         }
 
-        $pd = new Parsedown();
+        $converter = new CommonMarkConverter(['html_input' => 'strip']);
-        $pd->setSafeMode(true);
 
         return [
             'currentNav'      => 'apropos',
-            'aboutHtml'       => EmailObfuscator::obfuscateHtml($pd->text($rawContent)),
+            'aboutHtml'       => EmailObfuscator::obfuscateHtml($converter->convert($rawContent)->getContent()),
             'contacts'        => $contacts,
             'pageTitle'       => 'À Propos – XAMXAM',
             'metaDescription' => "À propos de XAMXAM, le répertoire des mémoires de fin d'études de l'erg – École de Recherches Graphiques de Bruxelles.",

app/src/Controllers/LicenceController.php

@@ -1,10 +1,11 @@
 <?php
 
 require_once APP_ROOT . '/src/Database.php';
-require_once APP_ROOT . '/src/Parsedown.php';
 require_once APP_ROOT . '/src/ErrorHandler.php';
 require_once APP_ROOT . '/src/EmailObfuscator.php';
 
+use League\CommonMark\CommonMarkConverter;
+
 class LicenceController
 {
     public static function create(): self
@@ -25,9 +26,8 @@ class LicenceController
             $pageTitle = 'Licences';
         }
 
-        $pd = new Parsedown();
+        $converter = new CommonMarkConverter(['html_input' => 'strip']);
-        $pd->setSafeMode(true);
+        $html = EmailObfuscator::obfuscateHtml($converter->convert($content)->getContent());
-        $html = EmailObfuscator::obfuscateHtml($pd->text($content));
 
         return [
             'content'          => $content,

app/storage/cache/rate_limit/ad921d60486366258809553a3db49a4a.json

@@ -1 +1 @@
-{"2":1779229816,"3":1779229853}
+[1779231711]

app/templates/partials/form/form-help-block.php

@@ -7,7 +7,6 @@
  *   string $helpKey     — block key, used as element id.
  *
  * Outputs nothing when $helpContent is empty or whitespace-only.
- * Parsedown must already be autoloaded (it is, via bootstrap → APP_ROOT/src/).
  */
 
 $helpContent = trim($helpContent ?? '');
@@ -15,13 +14,11 @@ if ($helpContent === '') {
     return;
 }
 
-require_once APP_ROOT . '/src/Parsedown.php';
+$converter = new League\CommonMark\CommonMarkConverter(['html_input' => 'strip']);
-$pd   = new Parsedown();
+$html = $converter->convert($helpContent)->getContent();
-$pd->setSafeMode(true);
-$html = $pd->text($helpContent);
 ?>
 <div class="student-help-block" id="help-<?= htmlspecialchars($helpKey ?? 'unknown') ?>">
     <?= $html ?>
 </div>
 <?php
-unset($helpContent, $pd, $html);
+unset($helpContent, $converter, $html);