Remove isTrusted from prComments markdown (#1)

* Remove isTrusted from prComments markdown

* Increase version

Author: alexr00

CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.25.1
+
+### Fixes
+
+- Fixed vulnerability described in [CVE-2021-28470](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28470)
+
 ## 0.25.0
 
 ### Changes

package.json

@@ -12,7 +12,7 @@
 	},
 	"enableProposedApi": true,
 	"preview": true,
-	"version": "0.25.0",
+	"version": "0.25.1",
 	"publisher": "GitHub",
 	"engines": {
 		"vscode": "^1.55.0"

src/github/prComment.ts

@@ -201,7 +201,6 @@ export class GHPRComment implements vscode.Comment {
 		this._rawComment = comment;
 		this.commentId = comment.id.toString();
 		this.body = new vscode.MarkdownString(comment.body);
-		this.body.isTrusted = true;
 		this.author = {
 			name: comment.user!.login,
 			iconPath: comment.user && comment.user.avatarUrl ? vscode.Uri.parse(comment.user.avatarUrl) : undefined,