diff --git a/website/data/blog/markdown-test.md b/website/data/blog/markdown-test.md index 72157d2..2af8c4f 100644 --- a/website/data/blog/markdown-test.md +++ b/website/data/blog/markdown-test.md @@ -102,7 +102,7 @@ const obj = { ## Images -![0.50](data/blog/media/test.gif "Caption Test") +![1.00](data/blog/media/test.gif "Caption Test") ![0.26](data/blog/media/paste-1778404389024-jnpo3.jpeg) diff --git a/website/scripts/MarkdownRenderer.js b/website/scripts/MarkdownRenderer.js index 731d3ee..10aa881 100644 --- a/website/scripts/MarkdownRenderer.js +++ b/website/scripts/MarkdownRenderer.js @@ -402,7 +402,7 @@ export class MarkdownRenderer { static #sanitizeUrl(url) { const trimmed = url.trim(); // Allow absolute URLs, root-relative, hash links, relative-dot paths, and plain relative paths - if (/^(https?:\/\/|mailto:|\/|#|\.)/.test(trimmed)) return trimmed; + if (/^(https?:\/\/|mailto:|blob:|\/|#|\.)/.test(trimmed)) return trimmed; // Allow relative paths (e.g. data/blog/media/image.png) — no protocol = safe relative if (/^[a-zA-Z0-9_\-][a-zA-Z0-9_.\-\/]*$/.test(trimmed)) return trimmed; return null;