|
1 | 1 | # @marp-team/marp-core
|
2 | 2 |
|
3 |
| -[](https://circleci.com/gh/marp-team/marp-core/) |
4 |
| -[](https://codecov.io/gh/marp-team/marp-core) |
| 3 | +[](https://circleci.com/gh/marp-team/marp-core/) |
| 4 | +[](https://codecov.io/gh/marp-team/marp-core) |
5 | 5 | [](https://www.npmjs.com/package/@marp-team/marp-core)
|
6 | 6 | [](./LICENSE)
|
7 | 7 |
|
@@ -33,7 +33,7 @@ Marp Markdown is based on [Marpit](https://github.com/marp-team/marpit) and [Com
|
33 | 33 | - Enable [inline SVG mode](https://github.com/marp-team/marpit#inline-svg-slide-experimental) and loose YAML parsing by default.
|
34 | 34 |
|
35 | 35 | * **CommonMark**
|
36 |
| - - For security reason, HTML tag only allows whitelisted elements by default. |
| 36 | + - For security reason, HTML tag only allows `<br />` by default. |
37 | 37 | - Support [table](https://github.github.com/gfm/#tables-extension-) and [strikethrough](https://github.github.com/gfm/#strikethrough-extension-) syntax, based on [GitHub Flavored Markdown](https://github.github.com/gfm/).
|
38 | 38 | - Line breaks in paragraph will convert to `<br>` tag.
|
39 | 39 | - Auto convert URL like text into hyperlink.
|
@@ -206,12 +206,12 @@ const marp = new Marp({
|
206 | 206 |
|
207 | 207 | ### `html`: _`boolean`_ | _`object`_
|
208 | 208 |
|
209 |
| -Setting whether to render raw HTML in Markdown. It's an alias to `markdown.html` ([markdown-it option](https://markdown-it.github.io/markdown-it/#MarkdownIt.new)) but has additional feature about HTML whitelist. |
| 209 | +Setting whether to render raw HTML in Markdown. It's an alias to `markdown.html` ([markdown-it option](https://markdown-it.github.io/markdown-it/#MarkdownIt.new)) but has additional feature about HTML allowlist. |
210 | 210 |
|
211 | 211 | - `true`: The all HTML will be allowed.
|
212 | 212 | - `false`: All HTML except supported in Marpit Markdown will be disallowed.
|
213 | 213 |
|
214 |
| -By passing `object`, you can set the whitelist to specify allowed tags and attributes. |
| 214 | +By passing `object`, you can set the allowlist to specify allowed tags and attributes. |
215 | 215 |
|
216 | 216 | ```javascript
|
217 | 217 | // Specify tag name as key, and attributes to allow as string array.
|
|
0 commit comments