-
Notifications
You must be signed in to change notification settings - Fork 4
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Render markdown files as markdown #18
Comments
I like the idea of being able to preview the markdown files. We already have a library to handle that (earmark) One consideration is that I would like to see the actual code whenever possible to be as transparent as possible when auditing code. One example might be a pixel image that isn't visible, but makes a call back to homebase. I think having a UI option to preview the markdown files would be great |
There are security considerations around rendering user-generated content as HTML, Earmark should be already handling that well but I'd hold off on this for a while after all. |
👍
Last time I checked earmark allowed any HTML and we need to be more conservative to avoid XSS and such. |
Markdown files are rendered as their raw contents: https://preview.hex.pm/preview/ecto/3.5.6/README.md
Seeing the raw contents is helpful for review, but it may also be worthwhile to expose the option of switching to a preview of the rendered output. There's not currently any UI allowances for options like this, which is likely the main blocker for making progress on this feature.
The text was updated successfully, but these errors were encountered: