Files

Vladimir Gorej a616cb471d fix(Markdown): render markdown in more secure way

This commit changes markdown sanitization behaviour in following way:

class, style and data-* attributes are removed by default. These attributes
open possible vulnerability vectors to attackers.

The original behavior of sanitizer (before this commit) can be enabled by *useUnsafeMarkdown* configuration option.
Use this configuration option with caution and only in cases when you know
what you're doing.

2020-06-11 21:51:15 +02:00

customization

docs: update plugin api component for failSilently (#5953 )

2020-04-12 22:36:11 -04:00

development

docs: update prerequisites for development (#5902 )

2020-03-05 14:26:54 -08:00

images

housekeeping: losslessly crush PNG images with pingo (via #5158 )

2019-02-06 22:11:04 -06:00

usage

fix(Markdown): render markdown in more secure way