Commit b7a9317
committed
Remove dependency on vue-showdown
Depend on Showdown directly instead, cutting out the middleman.
Additionally:
* Escape HTML outside of Markdown code blocks, in order to prevent unintended rendering of HTML elements (e.g. the `textarea` in CVE-2022-25869)
* Always run Showdown output through DOMPurify
Signed-off-by: nscuro <[email protected]>1 parent c913680 commit b7a9317
File tree
5 files changed
+17017
-555
lines changed- src
- views
- components
- portfolio/vulnerabilities
5 files changed
+17017
-555
lines changed
0 commit comments