Replies: 5 comments
-
|
|
Beta Was this translation helpful? Give feedback.
-
|
Mostly simple |
Beta Was this translation helpful? Give feedback.
-
|
Based on a quick |
Beta Was this translation helpful? Give feedback.
-
|
|
Beta Was this translation helpful? Give feedback.
-
|
Thanks for many feedbacks! ✨ A new Marp Core v4 has been relaxed allowlist of HTML elements and attributes, and a lot of HTML elements for layouting are permited by default. Check out #533 for more details. |
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
-
When enabling HTML in Marp, what HTML tags and attributes are you using in Marp slides?
Background
In the next major version of Marp Core, there is a plan to relax the allowlist for raw HTML contents in Markdown.
Forgetting the config for enabling HTML tags when converting is a frequently mentioned mistake in Marp discussions and issues. To mitigate that, we plan to allow certain HTML tags and attributes, deemed safe from a security perspective, in Markdown without changing settings. 1
Marp team has wanted to examine HTML tags frequently used by Marp users, and to create a default allowlist that is suitable and secure for every Marp user.
But despite a long-standing pinned issue marp-team/marp-core#301, it has not yet received enough feedback to create that.🥺
We welcome any feedback about the HTML tags and attributes you often use in Marp, no matter how minor!
Footnotes
https://github.com/marp-team/marp-core/issues/368#issuecomment-2004426271 ↩
Beta Was this translation helpful? Give feedback.
All reactions