From c391df0d55de7aca8c88ddb0e865f30ae9cda06c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?J=C3=B6rg=20Lohrer?= Date: Tue, 28 Apr 2026 08:05:37 +0200 Subject: [PATCH] chore(render): alte dompurify-deps entfernt + design-rationale-kommentar MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Dead-code aus etappe 1 nachgezogen: - dompurify + @types/dompurify aus package.json (jetzt isomorphic-dompurify als einziger sanitizer, bringt eigene typen mit) - design-rationale-kommentar fuer markedInstance zurueckgebracht (Spec §3: lokale ersetzbarkeit der engine — nicht aus dem code ablesbar) Co-Authored-By: Claude Opus 4.7 (1M context) --- app/package.json | 2 -- app/src/lib/render/markdown.ts | 5 +++++ 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/app/package.json b/app/package.json index 7a8b932..e75b00f 100644 --- a/app/package.json +++ b/app/package.json @@ -20,7 +20,6 @@ "@sveltejs/kit": "^2.57.0", "@sveltejs/vite-plugin-svelte": "^7.0.0", "@testing-library/svelte": "^5.3.1", - "@types/dompurify": "^3.0.5", "jsdom": "^29.0.2", "svelte": "^5.55.2", "svelte-check": "^4.4.6", @@ -33,7 +32,6 @@ "applesauce-loaders": "^5.1.0", "applesauce-relay": "^5.2.0", "applesauce-signers": "^5.2.0", - "dompurify": "^3.4.0", "highlight.js": "^11.11.1", "isomorphic-dompurify": "^3.10.0", "marked": "^18.0.0", diff --git a/app/src/lib/render/markdown.ts b/app/src/lib/render/markdown.ts index 383fdfe..6a29211 100644 --- a/app/src/lib/render/markdown.ts +++ b/app/src/lib/render/markdown.ts @@ -14,6 +14,11 @@ hljs.registerLanguage('bash', bash); hljs.registerLanguage('sh', bash); hljs.registerLanguage('json', json); +/** + * Lokaler Marked-Instance, damit die globale `marked`-Singleton nicht + * mutiert wird — andere Module können `marked` unbeeinflusst weiterverwenden. + * (Spec §3: lokale Ersetzbarkeit der Engine.) + */ const markedInstance = new Marked({ breaks: true, gfm: true,