Can't disable HTML sanitization #564
Assignees
Comments
|
An option to disable sanitization makes sense |
SukkaW
added a commit
to SukkaW/markdown-to-jsx
that referenced
this issue
May 13, 2024
SukkaW
added a commit
to SukkaW/markdown-to-jsx
that referenced
this issue
May 13, 2024
|
I've created a PR #579 that implements this feature. @quantizor Would you like to review it? |
|
I'd be keen to see this happen as well, I have a couple of legitimate use cases where data URIs are being used in href. |
quantizor
added a commit
that referenced
this issue
Aug 18, 2024
* feat: allow disable sanitization (#564) * test: #564 * chore: add changeset * chore: restore prior whitespace * refactor: adjust sanitizer to provide more data to the composer * refactor: DX tweaks * chore: adjust size limit will golf this down later * chore: tweak changeset --------- Co-authored-by: Evan Jacobs <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
I want to be able to render an anchor tag with an onclick attribute that executes some javascript. This was possible before version 6.11.4, but was changed in this PR.
I think that users should be able to disable this sanitization. In my case, the markdown I'm rendering will always come from a trusted source, so I don't have to worry about XSS.
The text was updated successfully, but these errors were encountered: