Strip JavaScript #497

New Issue

claunia · 2026-01-29T14:38:11Z

claunia commented

2026-01-29 14:38:11 +00:00

Originally created by @tidyui on GitHub (Jan 28, 2022).

This is more of a question than an issue, but I was wondering if there’s any option or extension point to, for security reasons, strip JavaScript inserted into markdown content either on save, or when converting to HTML.

Best regards

Originally created by @tidyui on GitHub (Jan 28, 2022). This is more of a question than an issue, but I was wondering if there’s any option or extension point to, for security reasons, strip JavaScript inserted into markdown content either on save, or when converting to HTML. Best regards

claunia added the question label 2026-01-29 14:38:11 +00:00

claunia closed this issue

2026-01-29 14:38:12 +00:00

claunia commented

2026-01-29 14:38:12 +00:00

@xoofx commented on GitHub (Jan 28, 2022):

There is no option to do it on Markdown directly and I suggest to do it on the output with e.g something like https://github.com/mganss/HtmlSanitizer

@xoofx commented on GitHub (Jan 28, 2022): There is no option to do it on Markdown directly and I suggest to do it on the output with e.g something like https://github.com/mganss/HtmlSanitizer

claunia referenced this issue

2026-01-29 14:49:19 +00:00

[PR #500] [MERGED] Add depth limits to avoid pathological-case parsing times/StackOverflows #1065

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/markdig#497