Escape HTML comment tags so that HTML comments are visible.

Thanks to xet7 !
wekan · Apr 24, 2023 · 167863d · 167863d
1 parent 22fc643
commit 167863d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/markdown/src/template-integration.js b/packages/markdown/src/template-integration.js
@@ -65,6 +65,6 @@ if (Package.ui) {
  text = Blaze._toText(self.templateContentBlock, HTML.TEXTMODE.STRING);
  }
 
- return HTML.Raw(DOMPurify.sanitize(Markdown.render(text), {ALLOW_UNKNOWN_PROTOCOLS: true}));
+ return HTML.Raw(DOMPurify.sanitize(Markdown.render(text).replace('<!--', '&lt;!--').replace('-->', '--&gt;'), {ALLOW_UNKNOWN_PROTOCOLS: true}));
  }));
 }