search

nuxt-community / markdownit-module

Markdownit for Nuxt 2
MIT License
48 stars 11 forks source link

Is there a way to avoid v-html ? #38

Open sg1asgard opened 3 years ago

sg1asgard commented 3 years ago

Hi all,

markdown-it recommends to not use html:true as it is known as a XSS security issue. In this case, is there a way to avoid using v-html and instead use {{$ms.renderer(mycontentmd)}} ?

Much appreciated. George

jomellelastrilla commented 3 years ago

I use v-dompurify-html to render

mattwang44 commented 3 years ago

Checkout this solution using vue-dompurify-html and the affiliated sample code.

sg1asgard commented 3 years ago

Checkout this solution using vue-dompurify-html and the affiliated sample code.

Much appreciated!