···

       
13
       
 
       
	"time"

     

       
14
       
 
       


     

       
15
       
 
       
	"github.com/dustin/go-humanize"

     

       
0
       
 
       

     

       
16
       
 
       
	"tangled.sh/tangled.sh/core/appview/filetree"

     

       
17
       
 
       
	"tangled.sh/tangled.sh/core/appview/pages/markup"

     

       
18
       
 
       
)

     
···

       
144
       
 
       
		},

     

       
145
       
 
       
		"markdown": func(text string) template.HTML {

     

       
146
       
 
       
			rctx := &markup.RenderContext{RendererType: markup.RendererTypeDefault}

     

       
147
       
-
       
			return template.HTML(rctx.RenderMarkdown(text))

     

       
148
       
 
       
		},

     

       
149
       
 
       
		"isNil": func(t any) bool {

     

       
150
       
 
       
			// returns false for other "zero" values

     

···

       
13
       
 
       
	"time"

     

       
14
       
 
       


     

       
15
       
 
       
	"github.com/dustin/go-humanize"

     

       
16
       
+
       
	"github.com/microcosm-cc/bluemonday"

     

       
17
       
 
       
	"tangled.sh/tangled.sh/core/appview/filetree"

     

       
18
       
 
       
	"tangled.sh/tangled.sh/core/appview/pages/markup"

     

       
19
       
 
       
)

     
···

       
145
       
 
       
		},

     

       
146
       
 
       
		"markdown": func(text string) template.HTML {

     

       
147
       
 
       
			rctx := &markup.RenderContext{RendererType: markup.RendererTypeDefault}

     

       
148
       
+
       
			return template.HTML(bluemonday.UGCPolicy().Sanitize(rctx.RenderMarkdown(text)))

     

       
149
       
 
       
		},

     

       
150
       
 
       
		"isNil": func(t any) bool {

     

       
151
       
 
       
			// returns false for other "zero" values

     

···

       
10
       
 
       
	"github.com/yuin/goldmark/ast"

     

       
11
       
 
       
	"github.com/yuin/goldmark/extension"

     

       
12
       
 
       
	"github.com/yuin/goldmark/parser"

     

       
0
       
 
       

     

       
13
       
 
       
	"github.com/yuin/goldmark/text"

     

       
14
       
 
       
	"github.com/yuin/goldmark/util"

     

       
15
       
 
       
	"tangled.sh/tangled.sh/core/appview/pages/repoinfo"

     
···

       
41
       
 
       
		goldmark.WithParserOptions(

     

       
42
       
 
       
			parser.WithAutoHeadingID(),

     

       
43
       
 
       
		),

     

       
0
       
 
       

     

       
44
       
 
       
	)

     

       
45
       
 
       


     

       
46
       
 
       
	if rctx != nil {

     

···

       
10
       
 
       
	"github.com/yuin/goldmark/ast"

     

       
11
       
 
       
	"github.com/yuin/goldmark/extension"

     

       
12
       
 
       
	"github.com/yuin/goldmark/parser"

     

       
13
       
+
       
	"github.com/yuin/goldmark/renderer/html"

     

       
14
       
 
       
	"github.com/yuin/goldmark/text"

     

       
15
       
 
       
	"github.com/yuin/goldmark/util"

     

       
16
       
 
       
	"tangled.sh/tangled.sh/core/appview/pages/repoinfo"

     
···

       
42
       
 
       
		goldmark.WithParserOptions(

     

       
43
       
 
       
			parser.WithAutoHeadingID(),

     

       
44
       
 
       
		),

     

       
45
       
+
       
		goldmark.WithRendererOptions(html.WithUnsafe()),

     

       
46
       
 
       
	)

     

       
47
       
 
       


     

       
48
       
 
       
	if rctx != nil {

     

···

       
562
       
 
       
		case markup.FormatMarkdown:

     

       
563
       
 
       
			p.rctx.RepoInfo = params.RepoInfo

     

       
564
       
 
       
			p.rctx.RendererType = markup.RendererTypeRepoMarkdown

     

       
565
       
-
       
			params.RenderedContents = template.HTML(p.rctx.RenderMarkdown(params.Contents))

     

       
566
       
 
       
		}

     

       
567
       
 
       
	}

     

       
568
       
 
       


     

···

       
562
       
 
       
		case markup.FormatMarkdown:

     

       
563
       
 
       
			p.rctx.RepoInfo = params.RepoInfo

     

       
564
       
 
       
			p.rctx.RendererType = markup.RendererTypeRepoMarkdown

     

       
565
       
+
       
			params.RenderedContents = template.HTML(bluemonday.UGCPolicy().Sanitize(p.rctx.RenderMarkdown(params.Contents)))

     

       
566
       
 
       
		}

     

       
567
       
 
       
	}

     

       
568