Merge pull request #478 from tuanaiseo/contribai/fix/security/potential-xss-risk-in-markdown-rendering

Security: Potential XSS risk in markdown rendering helper if reused with untrusted input

Author: gre

packages/cookbook/src/markdown.js

@@ -1,7 +1,7 @@
 import React from "react";
 import remark from "remark";
 import remarkReactRenderer from "remark-react";
-const MD = remark().use(remarkReactRenderer);
+const MD = remark().use(remarkReactRenderer, { sanitize: true });
 function markdown(strings: Array<string>, ...values: Array<string>) {
   let contents = [];
   for (let i = 0; i < strings.length; i++) {