From cb1500bdf9417f330711afc17f020c2a6732b184 Mon Sep 17 00:00:00 2001 From: Trezy Date: Wed, 13 May 2026 13:45:54 +0000 Subject: [PATCH] docs: use strict security for mermaid to prevent XSS Signed-off-by: Trezy --- packages/docs/src/components/mermaid.tsx | 2 +- 1 file(s) changed, 1 insertion(s)(+), 1 deletion(s)(-) diff --git a/packages/docs/src/components/mermaid.tsx b/packages/docs/src/components/mermaid.tsx --- a/packages/docs/src/components/mermaid.tsx +++ b/packages/docs/src/components/mermaid.tsx @@ -31,7 +31,7 @@ ); mermaid.initialize({ startOnLoad: false, - securityLevel: 'loose', + securityLevel: 'strict', fontFamily: 'inherit', theme: resolvedTheme === 'dark' ? 'dark' : 'default', }); -- tangled.sh