Commit e80627d
committed
Remove dependency on vue-showdown
Depend on Showdown directly instead, cutting out the middleman.
Additionally:
* Escape HTML outside of Markdown code blocks, in order to prevent unintended rendering of HTML elements (e.g. the `textarea` in CVE-2022-25869)
* Always run Showdown output through DOMPurify
Signed-off-by: nscuro <[email protected]>1 parent 9c6bd07 commit e80627d
File tree
5 files changed
+17017
-555
lines changed- src
- views
- components
- portfolio/vulnerabilities
5 files changed
+17017
-555
lines changed
0 commit comments