fix: sanitize in our code

Fixes https://github.com/atom-ide-community/atom-ide-markdown-service/pull/35/files#r503025236
atom-community · Oct 12, 2020 · 3c0f470 · 3c0f470
1 parent 7f8e286
commit 3c0f470
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/src/renderer.ts b/src/renderer.ts
@@ -61,7 +61,6 @@ export async function highlight(code: string, scopeName: string) {
 
 marked.setOptions({
  breaks: true,
- sanitizer: (html) => DOMPurify.sanitize(html),
 })
 
 /**
@@ -90,6 +89,10 @@ function internalRender(markdownText: string, scopeName: string = "text.plain"):
  reject(e)
  }
  let template = document.createElement("template")
+
+ // sanitization
+ html = DOMPurify.sanitize(html)
+
  template.innerHTML = html.trim()
  return resolve(template.content.cloneNode(true))
  }