Handle HTML safety in MDEx
mainMDEx provides four mechanisms to manage how raw HTML in input is handled during rendering: omitting (default), escaping, sanitizing, and unsafe rendering.
- Omitting (Default): Raw HTML is removed and replaced with a comment
<!-- raw HTML omitted -->. - Escape: Raw HTML is rendered but all tags are escaped (e.g.,
<becomes<). - Sanitize: Raw HTML is rendered but cleaned using a set of safety rules. Note: You must set
render: [unsafe: true]to enable sanitization. - Unsafe: Raw HTML is rendered exactly as provided without any modifications.
MDEx employs 4 mechanisms to handle safety: omitting, escaping, sanitizing, and unsafe rendering.