🛠 Replace inline HTML sanitization with a custom Markdown component for consistency.

🛡 Add `DisallowedRawHtmlExtension` to Markdown config for enhanced security.
2026-05-21 11:05:34 +00:00 · 2026-04-05 19:00:30 +01:00
parent 8e7672691d
commit 16134d6be6
3 changed files with 3 additions and 2 deletions
@@ -75,7 +75,7 @@ return [
     * More info: https://commonmark.thephpleague.com/2.4/extensions/overview/
     */
    'extensions' => [
-        //
+        League\CommonMark\Extension\DisallowedRawHtml\DisallowedRawHtmlExtension::class,
    ],

    /*
@@ -138,7 +138,7 @@ new class extends Component {
                        {{ $projectProposal->name }}
                    </h1>
                    <x-markdown>
-                        {!! \Stevebauman\Purify\Facades\Purify::clean($projectProposal->description) !!}
+                        {!! $projectProposal->description !!}
                    </x-markdown>
                </header>

@@ -0,0 +1 @@
+<div {{ $attributes }}>{!! \Stevebauman\Purify\Facades\Purify::clean($toHtml($slot)) !!}</div>
				`@@ -0,0 +1 @@`
				`<div {{ $attributes }}>{!! \Stevebauman\Purify\Facades\Purify::clean($toHtml($slot)) !!}</div>`