When doing markdown to HTML, sanitize HTML

Closes #101
Closes #102

lib/music_library_web/components/notes.ex

@@ -156,6 +156,8 @@ defmodule MusicLibraryWeb.Components.Notes do
     end
   end
 
+  # sobelow_skip ["XSS.Raw"]
+  # Markdown.to_html/1 sanitizes HTML via HtmlSanitizeEx
   defp render_content(content) do
     content
     |> Markdown.to_html()

lib/music_library_web/components/search_components.ex

@@ -346,6 +346,8 @@ defmodule MusicLibraryWeb.SearchComponents do
     """
   end
 
+  # sobelow_skip ["XSS.Raw"]
+  # Markdown.to_html/1 sanitizes HTML via HtmlSanitizeEx
   defp render_description(description) do
     description
     |> String.slice(0, 100)