This a follow-up from https://gitlab.com/gitlab-org/gitlab/-/merge_requests/72733#note_710324672 > `MathJax` seems to be super flexible in what they allow, for example https://docs.mathjax.org/en/latest/input/tex/extensions/textmacros.html. And the Google blog post is super interesting in that regards. > Something interesting is https://docs.mathjax.org/en/latest/options/safe.html which has a bunch of options like blocking javascript. ### Proposal We should implement https://docs.mathjax.org/en/latest/options/safe.html to improve ~security for [`MathJax` usage](https://gitlab.com/gitlab-org/gitlab/blob/1eb3a47c5ad9a2c36435ac70694936a77413a8f0/app/assets/javascripts/notebook/cells/output/latex.vue#L26).