diff --git a/frontend/src/components/AppNodeText.vue b/frontend/src/components/AppNodeText.vue index b6bb1c381..3ce939fec 100644 --- a/frontend/src/components/AppNodeText.vue +++ b/frontend/src/components/AppNodeText.vue @@ -4,28 +4,16 @@ Selectively renders the following tags in HTML and SVG: - - - - with an `href` attribute surrounded in double quotes - - There are two alternatives to the approach taken here, but neither are - sufficient. - - 1. We could use a sanitizer like [DOMPurify](https://github.com/cure53/DOMPurify) - to sanitize arbitrary strings, but that would strip out legitimate text - that an HTML parser might confuse for a tag. An example of such text can be - found here: - - 2. We could escape the entire string, selectively unescape `<sup>` (and - so on), and then pass the string to `containerEl.innerHTML`. However, this - would lead to markup without the desired effect in SVG, since the and - elements do not do anything in SVG. - + - + - with an `href` attribute starting with `http`, surrounded in double quotes -->