mirror of
https://gh-proxy.org/https://github.com/klinsmaya/multica.git
synced 2026-11-11 02:46:45 +08:00
Bluemonday operates on raw text, so characters like && and <> inside markdown code blocks/inline code were being HTML-escaped (e.g. && → &&), causing them to render incorrectly in the frontend. Now extracts fenced code blocks and inline code spans before sanitization, runs bluemonday on the remaining content, then restores the code verbatim.