When doing markdown to HTML, sanitize HTML

Closes #101 Closes #102
2026-03-07 19:05:37 +00:00
parent 84ffcc720b
commit 52815bde2f
8 changed files with 44 additions and 0 deletions
@@ -156,6 +156,8 @@ defmodule MusicLibraryWeb.Components.Notes do
    end
  end

+  # sobelow_skip ["XSS.Raw"]
+  # Markdown.to_html/1 sanitizes HTML via HtmlSanitizeEx
  defp render_content(content) do
    content
    |> Markdown.to_html()