ed 9f8edb7f32 make markdown slightly safer without the nohtml volflag ...

by running dompurify after marked.parse if plugins are not enabled;
adds no protection against the more practical approach of just
putting a malicious <script> in an html file and uploading that,
but one footgun less is one less footgun

2023-08-26 17:37:02 +00:00

..

codemirror.patch

…

Dockerfile

…

easymde-ln.patch

…

easymde-marked6.patch

…

easymde.patch

…

genprism.py

…

genprism.sh

…

Makefile

…

markdown-it.patch

…

marked-ln.patch

…

marked.patch

…

mini-fa.css

…

mini-fa.sh

…

shiftbase.py

…

showdown.patch

…

zopfli.makefile

…