feat: 编译时防范 XSS 攻击

src/components/MainEditor.vue

@@ -50,7 +50,7 @@ import '@vavt/v3-extension/lib/asset/PreviewThemeSwitch.css';
 import '@vavt/v3-extension/lib/asset/ExportPDF.css';
 import UploadImageConfig from './UI/UploadImageConfig.vue';
 import scriptjs from 'scriptjs'
-import { config, MdEditor, MdCatalog, NormalToolbar } from 'md-editor-v3';
+import { config, MdEditor, MdCatalog, NormalToolbar, XSSPlugin } from 'md-editor-v3';
 import { ThemeSwitch, PreviewThemeSwitch, ExportPDF } from '@vavt/v3-extension';
 import { lineNumbers } from '@codemirror/view';
 import { ref, reactive, watch, nextTick, onMounted } from "vue";
@@ -171,6 +171,16 @@ config({
         // 编辑器显示输入框的行号
         return [...extensions, lineNumbers()];
     },
+    markdownItPlugins(plugins) {
+        return [
+            ...plugins,
+            {
+                type: 'xss',
+                plugin: XSSPlugin,
+                options: {},
+            },
+        ];
+    },
 });
 
 const toggleLeftSideBar = () => {