You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Depend on Showdown directly instead, cutting out the middleman.
Additionally:
* Escape HTML outside of Markdown code blocks, in order to prevent unintended rendering of HTML elements (e.g. the `textarea` in CVE-2022-25869)
* Always run Showdown output through DOMPurify
Signed-off-by: nscuro <[email protected]>
0 commit comments