fix: anchor tag safety (via #4789)
* v3.17.6 * release(3.17.6): rebuild dist * add failing tests * fix Link component * fix OnlineValidatorBadge component * switch from <a> to <Link> in operation components * make Markdown inputs safe * use Link component in Info block, for target safety * add eslint rule for unsafe `target` usage
This commit is contained in:
@@ -7,6 +7,8 @@ import { sanitizer } from "core/components/providers/markdown"
|
||||
|
||||
const parser = new Remarkable("commonmark")
|
||||
|
||||
parser.set({ linkTarget: "_blank" })
|
||||
|
||||
export const Markdown = ({ source, className = "" }) => {
|
||||
if ( source ) {
|
||||
const html = parser.render(source)
|
||||
|
||||
Reference in New Issue
Block a user