Fix markdown xss

[zeelsheladiya]

Pull Request

This PR addresses a critical Stored Cross-Site Scripting (XSS) vulnerability in the Markdown parser. Previously, the parser rendered raw HTML without sanitization, allowing arbitrary JavaScript execution via crafted Markdown content.

Description

• Added dompurify and @types/dompurify dependencies to handle HTML sanitization.
• Modified src/features/editor/markdown/parser.ts to sanitize the parsed HTML string using DOMPurify.sanitize() before returning it.
• This ensures that unsafe HTML attributes (like onerror events) are stripped out while preserving legitimate Markdown formatting and secure HTML elements.

Screenshots/Videos

Before:

before.mp4

After:

after.mp4

[mehmetozguldev]

LGTM