lee/pandoc
1
0
Fork 0
mirror of https://github.com/jgm/pandoc.git synced 2026-08-25 17:56:32 +00:00
Code Issues Packages Projects Releases Wiki Activity

Rephrase section on unsafe HTML in manual.

Browse Source
This commit is contained in:
John MacFarlane
2021-06-14 12:36:05 -07:00
parent 62533053da
commit 961268446c
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
MANUAL.txt
+3 -3
View File
@@ -6504,9 +6504,9 @@ application, here are some things to keep in mind:
4. The HTML generated by pandoc is not guaranteed to be safe.
If `raw_html` is enabled for the Markdown input, users can
inject arbitrary HTML. Even if `raw_html` is disabled,
users can include dangerous content in attributes for
headings, spans, and code blocks. To be safe, you should
run all the generated HTML through an HTML sanitizer.
users can include dangerous content in URLs and attributes.
To be safe, you should run all the generated HTML through
an HTML sanitizer.
# Authors