Skip to content

Commit e80627d

Browse files
committed
Remove dependency on vue-showdown
Depend on Showdown directly instead, cutting out the middleman. Additionally: * Escape HTML outside of Markdown code blocks, in order to prevent unintended rendering of HTML elements (e.g. the `textarea` in CVE-2022-25869) * Always run Showdown output through DOMPurify Signed-off-by: nscuro <[email protected]>
1 parent 9c6bd07 commit e80627d

File tree

5 files changed

+17017
-555
lines changed

5 files changed

+17017
-555
lines changed

0 commit comments

Comments
 (0)