• Steven's avatar
    refactor(web): improve MemoContent security and maintainability · 4668c471
    Steven authored
    Security improvements:
    - Add rehype-sanitize for XSS protection in markdown content
    - Remove DOMPurify and deprecated __html code block feature
    - Extract sanitize schema to constants with comprehensive documentation
    
    Maintainability improvements:
    - Extract SANITIZE_SCHEMA to constants.ts for better organization
    - Create utils.ts with shared code extraction utilities
    - Refactor CodeBlock and MermaidBlock to use shared utilities
    - Rename PreProps to CodeBlockProps for clarity
    - Reduce code duplication across components
    
    Dependency cleanup:
    - Remove explicit katex dependency (now transitive via rehype-katex)
    - Remove @matejmazur/react-katex (unused)
    - Remove dompurify (replaced by rehype-sanitize)
    - Update vite config to remove katex-vendor chunk
    
    Changes: 7 files changed, 84 insertions(+), 100 deletions(-)
    
    🤖 Generated with [Claude Code](https://claude.com/claude-code)
    Co-Authored-By: 's avatarClaude <noreply@anthropic.com>
    4668c471
Name
Last commit
Last update
.github Loading commit data...
cmd/memos Loading commit data...
internal Loading commit data...
plugin Loading commit data...
proto Loading commit data...
scripts Loading commit data...
server Loading commit data...
store Loading commit data...
web Loading commit data...
.dockerignore Loading commit data...
.gitignore Loading commit data...
.golangci.yaml Loading commit data...
CLAUDE.md Loading commit data...
CODEOWNERS Loading commit data...
LICENSE Loading commit data...
README.md Loading commit data...
SECURITY.md Loading commit data...
go.mod Loading commit data...
go.sum Loading commit data...