showdown-xss-config

XSS configurable filter extension for showdown

Usage no npm install needed!

<script type="module">
  import showdownXssConfig from 'https://cdn.skypack.dev/showdown-xss-config';
</script>

README

showdown-xss-config

Showdown extension to filter XSS, using leizongmin/js-xss.

npm dependencies Status devDependencies Status

Client-side

<script src="/path/to/showdown/src/showdown.js"></script>
<script src="/path/to/xss/dist/xss.min.js"></script>
<script src="/path/to/showdown-xss-config.js"></script>
var converter = new showdown.Converter({ extensions: [xssfilter()] })
var text = "<script>alert('xss!')</script>";
console.log(converter.makeHtml(text));

Note: be sure to include the dependency on leizongmin/js-xss before this extension.

Server-side (node)

var showdown = require('showdown');
var xssFilter = require('showdown-xss-filter');
var converter = new showdown.Converter({extensions: [xssFilter()]});

var text = "<script>alert('xss!')</script>";
console.log(converter.makeHtml(text));