Function sanitizeHTML

frontend/src/components/ui/markdown.tsx:229–232

* Sanitizes HTML content to prevent XSS attacks. * * @param html - Raw HTML string from markdown rendering * @returns Sanitized HTML safe for dangerouslySetInnerHTML

(html: string)

 * @returns Sanitized HTML safe for dangerouslySetInnerHTML
 */
function sanitizeHTML(html: string): string {
  // Use .toString() to ensure we return a string even if Trusted Types are enabled
  return DOMPurify.sanitize(html, DOMPURIFY_CONFIG).toString();
}

// Initialize markdown-it with plugins (similar to n8n sticky notes)
const md = new MarkdownIt({