Article-pipeline sanitiser schema. Extends rehype-sanitize's default schema with a curated set of allow-listed classNames / IDs:
<pre class="mermaid"> for client-side Mermaid diagrams.
<code class="language-…"> and <code class="mermaid">.
<a class="anchor heading-anchor"> for the autolink-heading icons.
<span class="icon icon-link"> for the autolink visual marker.
<div class="rm-table-wrap"> for horizontally-scrollable tables.
id on h1..h6 for stable deep-linking.
Anything else continues to be scrubbed — no inline <script>, no javascript: URLs, no <iframe>, no <style> tags. See THREAT_MODEL.md §6 for the full XSS-mitigation contract.
Article-pipeline sanitiser schema. Extends
rehype-sanitize's default schema with a curated set of allow-listed classNames / IDs:<pre class="mermaid">for client-side Mermaid diagrams.<code class="language-…">and<code class="mermaid">.<a class="anchor heading-anchor">for the autolink-heading icons.<span class="icon icon-link">for the autolink visual marker.<div class="rm-table-wrap">for horizontally-scrollable tables.idonh1..h6for stable deep-linking.Anything else continues to be scrubbed — no inline
<script>, nojavascript:URLs, no<iframe>, no<style>tags. SeeTHREAT_MODEL.md§6 for the full XSS-mitigation contract.