Jakub Zych 528d2d8451 fix(classes): keep raw HTML in content_html behind the safety gate ...

- FormatHTML renders with goldmark html.WithUnsafe(), as Winter's
  Markdown::parse passes raw HTML through, so an admin save, an import or
  an API write no longer turns imported HTML into raw HTML omitted
- rejectUnsafe still runs after the render and refuses script, iframe,
  object and embed tags, event handlers and javascript, vbscript and data
  URLs; API response shapes are unchanged
- TestFormatHTMLKeepsRawHTML covers HTML paragraphs and a raw footer

2026-10-09 20:58:49 +02:00

..

check_html_test.go

feat(admin): edit category content in the admin form behind the HTML gate

2026-10-09 16:26:12 +02:00

format_html_test.go

fix(classes): keep raw HTML in content_html behind the safety gate

2026-10-09 20:58:49 +02:00

format_html.go

fix(classes): keep raw HTML in content_html behind the safety gate

2026-10-09 20:58:49 +02:00