- check-phase10, 12.1, 12.2 and 14.2.1 drop only the exact MarkdownField.vue line binding sanitizedHtml (server-rendered by cabana.RenderMarkdown); every other raw-HTML sink is still refused