.1502411993651747:ac3bcb3f140171691d75c8bfec2c7bfe_69f56f29dc48703ced6ce1f3.69f56f99dc48703ced6ce207.69f56f98ff5d45dc322cbd5c:Trae CN.T(2026/5/2 11:29:29)#707
Open
lovely90133 wants to merge 3 commits intouiwjs:masterfrom
Conversation
添加rehype-sanitize作为默认的markdown预览安全插件 实现自动合并用户自定义rehype插件与默认安全插件 添加全面的XSS安全测试用例
添加更多XSS测试用例并完善断言，验证默认sanitize行为与自定义rehype插件的交互 确保测试覆盖安全风险场景并明确标记潜在风险
添加详细的文档说明和代码注释，明确以下安全责任边界： 1. previewOptions 的自动 sanitize 注入规则 2. 自定义 preview 组件的安全风险 3. MDEditor.Markdown 静态组件的安全注意事项 4. 核心安全函数的实现逻辑和边界条件
|
@lovely90133 is attempting to deploy a commit to the kenny wong's projects Team on Vercel. A member of the Team first needs to authorize it. |
Member
|
@lovely90133 rehype-sanitize 没有默认集成进来时 rehype-sanitize 会破坏标签的一些属性值，不能显示 html 执行 js 脚本，在有些项目中我需要这些 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
docs(core): 完善安全边界文档和XSS保护机制注释
添加详细的文档说明和代码注释，明确以下安全责任边界：