From 0ec7fb95c025ae2bb30f1886a24f17487cd7e5d2 Mon Sep 17 00:00:00 2001 From: Derek Reynolds Date: Tue, 9 Jun 2026 20:20:49 -0700 Subject: [PATCH] feat(detail): render issue bodies & comments as markdown MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Read-side markdown rendering (goldmark, GFM + hard wraps) with mandatory bluemonday sanitization of the output — these are user input. goldmark stays in safe mode (raw HTML not rendered) and the output is sanitized regardless, so it's safe twice over; on a render error it falls back to escaped plain text. - detailInner.Description / commentView.Body are now sanitized template.HTML. - Body switched from

to

(block-level output); comments get the markdown class too. Dark-theme styles for code/pre/lists/quotes/tables. - Write side stores raw markdown source unchanged; the edit form still shows the raw source. Verified in-browser: **bold**, `code`, links, lists, fenced blocks all render;