Level 25
I would use {!! $post->content !!} and sanitize the output with a package like stevebauman/purify to get rid of anything nasty.
Apr 28, 2022
7
Level 12
How to edit spatie/laravel-markdown html elements (blocks)
Hey!
I installed spatie/laravel-markdown and implemented it in my code by adding <x-markdown>{{ $post->content }}</x-markdown> (note that it's not <x-markdown>{!! $post->content !!}</x-markdown> - which one is the right way?) where the post is displayed (I have no idea if that is the right implementation of this package). Adding the triple " ` " before and after a code/text while posting a thread results in this:
(I show that the box with the code goes beyond the field of the main box)
How can I edit these markdown html elements the best way? Also do you have any suggestions on how to use this package the best&securely way?
P.S.: I tried Sinnbeck's package but some errors occur on installation (through composer)
Level 12
@aleahy so when the user insert in their code block <script src="..."></script> it will be literally removed. What a brilliant idea. Joke aside, that's not what I'm looking for. Thanks tho!
Level 25
@Laralex Just went back through the docs and found what looks like a solution.
You can pass options to commonmark through the x-markdown tag.
I believe the one you want is 'html_input' => 'escape'
<x-markdown :options="['html_input' => 'escape']">
{!! $post->content !!}}
<x-markdown>
https://spatie.be/docs/laravel-markdown/v1/using-the-blade-component/passing-options-to-commonmark
https://commonmark.thephpleague.com/1.6/security/
Otherwise you will need to clean the content yourself because laravel will use htmlspecialchars on anything between {{ }}.
Level 12
@aleahy Still the same output
<x-markdown :options="['html_input' => 'escape']">{!! $post->content !!}</x-markdown>
Level 12
I still need suggestions.
Level 122
What does the text in the database look like?
You haven't previously created a markdown.blade.php component?
Level 12
@Snapey I haven't worked on this project for 3 days and now when I opened it everything looks fine. Wow.. Programming is so strange sometimes. Anyways, the text looks just like inserted.
I haven't created markdown.blade.php, do I have to? And how to actually apply css and change some settings for this markdown?
Please or to participate in this conversation.