Fix code coverage in references

lib/rules_block/reference.js

@@ -27,14 +27,13 @@ module.exports = function reference(state, startLine, _endLine, silent) {
       max = state.eMarks[startLine],
       nextLine = startLine + 1;
 
-  if (pos >= max) { return false; }
   if (state.src.charCodeAt(pos) !== 0x5B/* [ */) { return false; }
 
   endLine = state.lineMax;
 
   // jump line-by-line until empty one or EOF
   if (nextLine < endLine && !state.isEmpty(nextLine)) {
-    terminatorRules = state.md.block.ruler.getRules('references');
+    terminatorRules = state.md.block.ruler.getRules('reference');
 
     for (; nextLine < endLine && !state.isEmpty(nextLine); nextLine++) {
       // this would be a code block normally, but after paragraph

test/fixtures/markdown-it/commonmark_extras.txt

@@ -231,3 +231,15 @@ Coverage. Link
 .
 <p>[test](</p>
 .
+
+Coverage. Reference
+.
+[
+test\
+]: 123
+foo
+bar
+.
+<p>foo
+bar</p>
+.

test/fixtures/markdown-it/xss.txt

@@ -77,3 +77,11 @@ javascript:alert(1)
 <p>javascript:alert(1)</p>
 <p>javascript:alert(1)</p>
 .
+
+References
+
+.
+[test]: javascript:alert(1)
+.
+<p>[test]: javascript:alert(1)</p>
+.