multica

mirror of https://github.com/multica-ai/multica.git synced 2026-07-26 12:35:35 +02:00

Files

Jiang Bohan 894fe05c85 fix(sanitize): protect markdown code blocks from bluemonday HTML encoding

bluemonday.Sanitize() was applied to raw markdown, which corrupted code
blocks by encoding > to &gt;, < to &lt;, and stripping tag-like syntax
(e.g. Array<string> became Array). Now fenced and inline code blocks are
extracted before sanitization and restored after, preserving code content
while still stripping XSS from non-code regions.

Closes #704

2026-04-11 21:22:46 +08:00