nvrl 7f15206ffb markdown: links open nothing they can reach back from ...

Every link with a target now gets rel="noopener noreferrer", and only
_blank is kept as a target. A named target such as target="foo" left
the page it opened a handle on this one — browsers imply noopener for
_blank alone — which it could use to send the tab to a lookalike login.

The share page turned links into the private workspace into plain text
with a regex over the sanitised HTML. A pattern over markup can end
inside an attribute, and on an engine that does not escape < and > in
attribute values a crafted link title became markup. The rewrite now
happens in renderMarkdown, on the parsed page.

2026-10-20 11:45:11 +02:00

..

src

markdown: links open nothing they can reach back from

2026-10-20 11:45:11 +02:00

bun.lock

markdown: math set by KaTeX, fetched only when a page has some

2026-10-20 10:25:26 +02:00

index.html

redesign

2026-10-17 13:44:05 +02:00

package.json

markdown: math set by KaTeX, fetched only when a page has some

2026-10-20 10:25:26 +02:00

svelte.config.js

Terminal-themed markdown diary

2026-09-05 05:39:25 +02:00

tsconfig.json

Terminal-themed markdown diary

2026-09-05 05:39:25 +02:00

vite.config.ts

markdown: math set by KaTeX, fetched only when a page has some

2026-10-20 10:25:26 +02:00