Skip to content

Remove v-html from app/assets/javascripts/vue_shared/components/blob_viewers/simple_viewer.vue

As part of the effort to remove v-html from the codebase, we need to replace it with a safer alternative.

This discussion raised a concern that just replacing v-html with v-safe-html might lead to an unexpected behavior as it could transform user data before displaying it in the UI.

There are a few approaches we can take to address this:

  1. frontend receives unescaped data from backend and use editor (monaco?) to render it.
  2. ?

Availability and Testing

Please run package-and-qa on MR(s) for regression purposes.

Edited by Anastasia McDonald