Replies: 3 comments
-
|
Beta Was this translation helpful? Give feedback.
0 replies
-
Mostly simple |
Beta Was this translation helpful? Give feedback.
0 replies
-
Based on a quick |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
When enabling HTML in Marp, what HTML tags and attributes are you using in Marp slides?
Background
In the next major version of Marp Core, there is a plan to relax the allowlist for raw HTML contents in Markdown.
Forgetting the config for enabling HTML tags when converting is a frequently mentioned mistake in Marp discussions and issues. To mitigate that, we plan to allow certain HTML tags and attributes, deemed safe from a security perspective, in Markdown without changing settings. 1
Marp team has wanted to examine HTML tags frequently used by Marp users, and to create a default allowlist that is suitable and secure for every Marp user.
But despite a long-standing pinned issue marp-team/marp-core#301, it has not yet received enough feedback to create that.🥺
We welcome any feedback about the HTML tags and attributes you often use in Marp, no matter how minor!
Footnotes
https://github.com/marp-team/marp-core/issues/368#issuecomment-2004426271 ↩
Beta Was this translation helpful? Give feedback.
All reactions