From 0586729b46f261bbf129079e6cfcae3dae90fd6f Mon Sep 17 00:00:00 2001 From: Emanuil Rusev Date: Fri, 13 Oct 2023 11:09:51 +0300 Subject: [PATCH] Update README.md --- README.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/README.md b/README.md index 95120ab..0951558 100644 --- a/README.md +++ b/README.md @@ -62,8 +62,6 @@ If instead, you wish to allow HTML within untrusted user-input, but still want o In both cases you should strongly consider employing defence-in-depth measures, like [deploying a Content-Security-Policy](https://scotthelme.co.uk/content-security-policy-an-introduction/) (a browser security feature) so that your page is likely to be safe even if an attacker finds a vulnerability in one of the first lines of defence above. -#### Security of Parsedown Extensions - Safe mode does not necessarily yield safe results when using extensions to Parsedown. Extensions should be evaluated on their own to determine their specific safety against XSS. ## Escaping HTML