react-headless-mde 1.0.2 → 1.0.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +5 -3
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -50,10 +50,12 @@ export const MarkdownEditor = () => {
|
|
|
50
50
|
|
|
51
51
|
## Todo
|
|
52
52
|
|
|
53
|
+
- heading undo
|
|
54
|
+
- undo/redo
|
|
53
55
|
- Check execution on SSR (For example, Next.js) and, if necessary, regenerate eslint config, taking into account execution on node.js
|
|
54
|
-
- Add to awesome-react-headless-components on stable version https://github.com/jxom/awesome-react-headless-components
|
|
55
56
|
- peerDependencies React?
|
|
56
|
-
|
|
57
|
+
|
|
58
|
+
PR's are welcome!
|
|
57
59
|
|
|
58
60
|
### Third party
|
|
59
61
|
|
|
@@ -61,7 +63,7 @@ export const MarkdownEditor = () => {
|
|
|
61
63
|
|
|
62
64
|
### XSS concerns
|
|
63
65
|
|
|
64
|
-
React-mde-headless does not automatically sanitize the HTML preview. If
|
|
66
|
+
React-mde-headless does not automatically sanitize the HTML preview. If you are using Showdown,
|
|
65
67
|
this has been taken from [their documentation](<https://github.com/showdownjs/showdown/wiki/Markdown's-XSS-Vulnerability-(and-how-to-mitigate-it)>):
|
|
66
68
|
|
|
67
69
|
> Cross-side scripting is a well known technique to gain access to private information of the users
|