Unverified50% confidenceSolutionExact time
The LaTeX renderer uses an <iframe sandbox> mechanism to defend against XSS risks, layered with DOMPurify for HTML sanitization.
1
Sources
50%
Confidence
Long-term
Relevance
10/16/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedXSS 防护主流方案包括输出净化（DOMPurify、sanitize-html）、沙箱隔离（iframe sandbox、Web Workers）和从源头禁用原始 HTML 内嵌78% similarUnverifiedMarkdown 解析器渲染 HTML 时的主要安全威胁是跨站脚本攻击（XSS），因标准 Markdown 允许内嵌原生 HTML72% similarUnverifiedXSS (Cross-Site Scripting) is when a page renders user input directly as HTML, causing malicious scripts to execute in other people's browsers; it is divided into reflected, stored, and DOM types.67% similarUnverifiedAllowing users to submit rich text content containing HTML markup can lead to XSS (Cross-Site Scripting) attacks, where malicious users can inject script tags to execute arbitrary JavaScript code.65% similarUnverifiedDOMPurify is a widely used HTML sanitization library in the frontend ecosystem, maintained by the Cure53 team, supporting sanitization of HTML, SVG, and MathML.65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1049533API
curl https://kongchang.com/api/v1/knowledge/claims/1049533MCP
get_claim(id=1049533)