Skip to content

Commit

Permalink
Fix warning and note styling that GitHub broke
Browse files Browse the repository at this point in the history
GitHub changed their custom Markdown syntax for alert blocks.
  • Loading branch information
rgrove authored Oct 2, 2024
1 parent b0ec1d6 commit 0601c1e
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -71,7 +71,7 @@ Sanitize can sanitize the following types of input:
* Standalone CSS stylesheets
* Standalone CSS properties

> **Warning**
> [!WARNING]
>
> Sanitize cannot fully sanitize the contents of `<math>` or `<svg>` elements. MathML and SVG elements are [foreign elements](https://html.spec.whatwg.org/multipage/syntax.html#foreign-elements) that don't follow normal HTML parsing rules.
>
Expand Down Expand Up @@ -419,13 +419,13 @@ elements not in this array will be removed.
]
```

> **Warning**
> [!WARNING]
>
> Sanitize cannot fully sanitize the contents of `<math>` or `<svg>` elements. MathML and SVG elements are [foreign elements](https://html.spec.whatwg.org/multipage/syntax.html#foreign-elements) that don't follow normal HTML parsing rules.
>
> By default, Sanitize will remove all MathML and SVG elements. If you add MathML or SVG elements to a custom element allowlist, you must assume that any content inside them will be allowed, even if that content would otherwise be removed or escaped by Sanitize. This may create a security vulnerability in your application.
> **Note**
> [!NOTE]
>
> Sanitize always removes `<noscript>` elements and their contents, even if `noscript` is in the allowlist.
>
Expand Down

0 comments on commit 0601c1e

Please sign in to comment.