diff --git a/pkg/converter/markdown.go b/pkg/converter/markdown.go index b1e2a4185..f6e76c450 100644 --- a/pkg/converter/markdown.go +++ b/pkg/converter/markdown.go @@ -32,7 +32,10 @@ func Markdown2HTML(source string) string { log.Error(err) return source } - return buf.String() + html := buf.String() + filter := bluemonday.NewPolicy() + html = filter.Sanitize(html) + return html } // Markdown2BasicHTML convert markdown to html ,Only basic syntax can be used