From eb6795884660ef8a024af97af5d6c5857f0804c8 Mon Sep 17 00:00:00 2001
From: John Chadwick <86682572+johnwchadwick@users.noreply.github.com>
Date: Fri, 23 Jul 2021 12:55:47 -0700
Subject: [PATCH] Refactor markdown preview to minimize unsafe HTML. (#3842)

Fixes INS-805.
---
 .../app/ui/components/markdown-preview.tsx             | 10 +++-------
 1 file changed, 3 insertions(+), 7 deletions(-)

diff --git a/packages/insomnia-app/app/ui/components/markdown-preview.tsx b/packages/insomnia-app/app/ui/components/markdown-preview.tsx
index 03261e4390..851a964cb4 100644
--- a/packages/insomnia-app/app/ui/components/markdown-preview.tsx
+++ b/packages/insomnia-app/app/ui/components/markdown-preview.tsx
@@ -117,16 +117,12 @@ class MarkdownPreview extends PureComponent<Props, State> {
   render() {
     const { className, heading } = this.props;
     const { compiled, renderError } = this.state;
-    const html = heading ? `<h1>${heading}</h1>\n${compiled}` : compiled;
     return (
       <div ref={this._setPreviewRef} className={classnames('markdown-preview', className)}>
         {renderError && <p className="notice error no-margin">Failed to render: {renderError}</p>}
-        <div
-          className="markdown-preview__content selectable"
-          dangerouslySetInnerHTML={{
-            __html: html,
-          }}>
-          {/* Set from above */}
+        <div className="markdown-preview__content selectable">
+          {heading ? <h1>{heading}</h1> : null}
+          <div dangerouslySetInnerHTML={{ __html: compiled }}></div>
         </div>
       </div>
     );