use trusted html for playground, fyi @JacksonKearl, #106395

microsoft · Oct 9, 2020 · 04b9275 · 04b9275
1 parent d2ebe3b
commit 04b9275
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/vs/workbench/contrib/welcome/walkThrough/browser/walkThroughPart.ts b/src/vs/workbench/contrib/welcome/walkThrough/browser/walkThroughPart.ts
@@ -303,7 +303,7 @@ export class WalkThroughPart extends EditorPane {
 				const innerContent = document.createElement('div');
 				innerContent.classList.add('walkThroughContent'); // only for markdown files
 				const markdown = this.expandMacros(content);
-				innerContent.innerHTML = marked(markdown, { renderer });
+				safeInnerHtml(innerContent, marked(markdown, { renderer }));
 				this.content.appendChild(innerContent);
 
 				model.snippets.forEach((snippet, i) => {