Escape HTML comment tags so that HTML comments are visible.

xet7 · xet7 · commit 167863d95711 · 2023-04-24T21:29:49.000+03:00
Thanks to xet7 !
diff --git a/packages/markdown/src/template-integration.js b/packages/markdown/src/template-integration.js
@@ -65,6 +65,6 @@ if (Package.ui) {
       text = Blaze._toText(self.templateContentBlock, HTML.TEXTMODE.STRING);
     }
 
-    return HTML.Raw(DOMPurify.sanitize(Markdown.render(text), {ALLOW_UNKNOWN_PROTOCOLS: true}));
+    return HTML.Raw(DOMPurify.sanitize(Markdown.render(text).replace('<!--', '&lt;!--').replace('-->', '--&gt;'), {ALLOW_UNKNOWN_PROTOCOLS: true}));
   }));
 }

Original file line number	Diff line number	Diff line change
`@@ -65,6 +65,6 @@ if (Package.ui) {`
`65`	`65`	`text = Blaze._toText(self.templateContentBlock, HTML.TEXTMODE.STRING);`
`66`	`66`	`}`
`67`	`67`
`68`		`- return HTML.Raw(DOMPurify.sanitize(Markdown.render(text), {ALLOW_UNKNOWN_PROTOCOLS: true}));`
	`68`	`+ return HTML.Raw(DOMPurify.sanitize(Markdown.render(text).replace('<!--', '<!--').replace('-->', '-->'), {ALLOW_UNKNOWN_PROTOCOLS: true}));`
`69`	`69`	`}));`
`70`	`70`	`}`