sanitize generated SVGs

BearToCode · Jul 23, 2023 · 139575a · 139575a
1 parent 6137c30
commit 139575a
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/packages/plugin-tikz/src/index.ts b/packages/plugin-tikz/src/index.ts
@@ -22,12 +22,15 @@ interface TikzExtensionOptions {
 	postProcess?: (elem: SVGElement) => void;
 }
 
+let sanitizer: ((html: string) => string) | undefined;
+
 /**
  * TikzJax extension for Carta.
  * @param options Tikz options.
  */
 export const tikz = (options?: TikzExtensionOptions): CartaExtension => {
 	return {
+		cartaRef: (carta) => (sanitizer = carta.options?.sanitizer),
 		shjRef: (shj) => {
 			import('./tikz').then((module) => shj.loadCustomLanguage('tikz', module));
 		},
@@ -84,7 +87,7 @@ const tikzTokenizer = (options?: TikzExtensionOptions): marked.TokenizerAndRende
 				class="tikz-generated ${options?.class ?? ''}"
 				tikz-generation="${currentGeneration}"
 			>
-				${html}
+				${sanitizer ? sanitizer(html) : html}
 			</div>
 			`;
 		}