Disable XSS sanitizer by default

[tripodsan]

Allowing HTML in markdown voids the need to a XSS sanitizer a little bit.
Suggest to disable it by default. either by removing it from the html pipeline completely, or safeguard it with:

    .before(sanitize).when(paranoid)

/cc @trieloff @davidnuescheler @ramboz

[rofe]

Agreed. And having to remember to use

  ${content.document.body.innerHTML @ context = 'unsafe'}

in html.htl is error prone and kind of ugly...

[tripodsan]

Agreed. And having to remember to use

  ${content.document.body.innerHTML @ context = 'unsafe'}

in html.htl is error prone and kind of ugly...

this was reverted with the new htlengine #337

[adobe-bot]

🎉 This issue has been resolved in version 2.5.0 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀