Skip to content

Restrict Markdown HTML sanitizer to an explicit attribute allowlist - #485

Merged
jeremy merged 2 commits into
mainfrom
security/markdown-attribute-allowlist
Aug 30, 2026
Merged

Restrict Markdown HTML sanitizer to an explicit attribute allowlist#485
jeremy merged 2 commits into
mainfrom
security/markdown-attribute-allowlist

Test that a foreign data-action is stripped on an anchor too

f15c09f
Select commit
Loading
Failed to load commit list.

Select a check to view from the sidebar