Markdown (GFM) import for the same subset serializeToMarkdown
emits. Block structure is resolved line by line, then each block's text is
scanned for inline markup.
Security: link and image destinations go through the same safeHref /
safeImageSrc sanitizers the HTML parser and the schema use, so a
javascript: URL in markdown is dropped exactly as it is in HTML. The
mark is simply not applied.
Markdown (GFM) import for the same subset serializeToMarkdown emits. Block structure is resolved line by line, then each block's text is scanned for inline markup.
Security: link and image destinations go through the same
safeHref/safeImageSrcsanitizers the HTML parser and the schema use, so ajavascript:URL in markdown is dropped exactly as it is in HTML. The mark is simply not applied.