Files
Kyle 933a75350a security: brand markdownToHTML output as SafeHTML
SafeHTML is a nominal string type only markdownToHTML can produce.
MarkdownPreview's compiled-HTML state is now typed SafeHTML, so any
future edit that assigns a plain string into that state (bypassing
the DOMPurify sanitizer) fails type-check instead of silently
reaching dangerouslySetInnerHTML.
2026-09-18 16:15:37 -04:00
..