Files
Jiang Bohan 894fe05c85 fix(sanitize): protect markdown code blocks from bluemonday HTML encoding
bluemonday.Sanitize() was applied to raw markdown, which corrupted code
blocks by encoding > to &gt;, < to &lt;, and stripping tag-like syntax
(e.g. Array<string> became Array). Now fenced and inline code blocks are
extracted before sanitization and restored after, preserving code content
while still stripping XSS from non-code regions.

Closes #704
2026-04-11 21:22:46 +08:00
..