xfy a77a2e3502 feat(markdown): support rendering and sanitizing runnable pre code-blocks ...

- markdown.rs: CodeBlock 处理识别 `runnable` 标记 + 受支持语言，在 <pre> 上
  挂 data-runnable/data-lang/data-overrides；overrides JSON 经 escape_html 转义
  防属性注入；非可运行围栏的 language-xxx 改取纯语言 token（首个空白前）
- sanitizer.rs: clean_html 放行 <pre> 的 data-runnable/data-lang/data-overrides
- 新增 4 个 markdown 测试 + 2 个 sanitizer 测试覆盖转义/白名单/字段顺序

2026-07-03 18:19:26 +08:00

..

code_runner

feat(api): implement StartExec and GetExecResult server functions

2026-07-03 18:15:59 +08:00

comments

refactor(utils): 拆分 comment_storage 的时间/HTML 工具函数

2026-07-02 16:15:23 +08:00

database

test(api/database): 备份恢复补单测 + 修复 backup_path 路径穿越漏洞

2026-07-02 17:37:07 +08:00

posts

feat(admin/posts): 文章列表操作列新增「重建内容」按钮

2026-07-03 10:13:15 +08:00

auth.rs

style: apply cargo fmt to workspace

2026-06-29 13:47:40 +08:00

csrf.rs

feat(csrf): warn at startup when APP_BASE_URL is unset

2026-06-29 11:02:58 +08:00

error.rs

feat(admin): add SQL console tab (read-write + 4 guards + sqlparser)

2026-06-29 18:56:15 +08:00

health.rs

feat(api): 新增 healthz/readyz 健康检查端点

2026-06-25 16:45:09 +08:00

image.rs

style: apply cargo fmt to workspace

2026-06-29 13:47:40 +08:00

markdown.rs

feat(markdown): support rendering and sanitizing runnable pre code-blocks

2026-07-03 18:19:26 +08:00

mod.rs

feat(api): define shared serialized structs for code runner

2026-07-03 18:09:27 +08:00

rate_limit.rs

feat(api): implement StartExec and GetExecResult server functions

2026-07-03 18:15:59 +08:00

sanitizer.rs

feat(markdown): support rendering and sanitizing runnable pre code-blocks

2026-07-03 18:19:26 +08:00

settings.rs

style: apply cargo fmt to workspace

2026-06-29 13:47:40 +08:00

slug.rs

security: fix critical issues from repository review

2026-06-17 10:34:14 +08:00

upload.rs

style: apply cargo fmt to workspace

2026-06-29 13:47:40 +08:00