Replies: 5 comments
-
|
Beta Was this translation helpful? Give feedback.
-
Mostly simple |
Beta Was this translation helpful? Give feedback.
-
Based on a quick |
Beta Was this translation helpful? Give feedback.
-
|
Beta Was this translation helpful? Give feedback.
-
Thanks for many feedbacks! ✨ A new Marp Core v4 has been relaxed allowlist of HTML elements and attributes, and a lot of HTML elements for layouting are permited by default. Check out #533 for more details. |
Beta Was this translation helpful? Give feedback.
-
When enabling HTML in Marp, what HTML tags and attributes are you using in Marp slides?
Background
In the next major version of Marp Core, there is a plan to relax the allowlist for raw HTML contents in Markdown.
Forgetting the config for enabling HTML tags when converting is a frequently mentioned mistake in Marp discussions and issues. To mitigate that, we plan to allow certain HTML tags and attributes, deemed safe from a security perspective, in Markdown without changing settings. 1
Marp team has wanted to examine HTML tags frequently used by Marp users, and to create a default allowlist that is suitable and secure for every Marp user.
But despite a long-standing pinned issue marp-team/marp-core#301, it has not yet received enough feedback to create that.🥺
We welcome any feedback about the HTML tags and attributes you often use in Marp, no matter how minor!
Footnotes
https://github.com/marp-team/marp-core/issues/368#issuecomment-2004426271 ↩
Beta Was this translation helpful? Give feedback.
All reactions