Improper filtering of classes used in codeblocks in Markdown

How it was found

Redcarpet just uses the name of the language as the classname of the element. So if the classnames are of significance to the site, one can break the site using this. For instance, this report disables the topbar, and can trigger the user into opening a popup. Proof of concept:

i eat the topbar

i open a popup