Skip to content

Commit b7a9317

Browse files
committed
Remove dependency on vue-showdown
Depend on Showdown directly instead, cutting out the middleman. Additionally: * Escape HTML outside of Markdown code blocks, in order to prevent unintended rendering of HTML elements (e.g. the `textarea` in CVE-2022-25869) * Always run Showdown output through DOMPurify Signed-off-by: nscuro <[email protected]>
1 parent c913680 commit b7a9317

File tree

5 files changed

+17017
-555
lines changed

5 files changed

+17017
-555
lines changed

0 commit comments

Comments
 (0)