From 628adc59ee5dbd034ae1804aab0d39ee16452ae3 Mon Sep 17 00:00:00 2001
From: Max Litruv Boonzaayer <litruv@gmail.com>
Date: Sun, 10 May 2026 19:23:01 +1000
Subject: [PATCH] fix: Update image dimensions in markdown test and enhance URL
 sanitization

---
 website/data/blog/markdown-test.md  | 2 +-
 website/scripts/MarkdownRenderer.js | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/website/data/blog/markdown-test.md b/website/data/blog/markdown-test.md
index 72157d2..2af8c4f 100644
--- a/website/data/blog/markdown-test.md
+++ b/website/data/blog/markdown-test.md
@@ -102,7 +102,7 @@ const obj = {
 
 ## Images
 
-![0.50](data/blog/media/test.gif "Caption Test")
+![1.00](data/blog/media/test.gif "Caption Test")
 
 ![0.26](data/blog/media/paste-1778404389024-jnpo3.jpeg)
 
diff --git a/website/scripts/MarkdownRenderer.js b/website/scripts/MarkdownRenderer.js
index 731d3ee..10aa881 100644
--- a/website/scripts/MarkdownRenderer.js
+++ b/website/scripts/MarkdownRenderer.js
@@ -402,7 +402,7 @@ export class MarkdownRenderer {
     static #sanitizeUrl(url) {
         const trimmed = url.trim();
         // Allow absolute URLs, root-relative, hash links, relative-dot paths, and plain relative paths
-        if (/^(https?:\/\/|mailto:|\/|#|\.)/.test(trimmed)) return trimmed;
+        if (/^(https?:\/\/|mailto:|blob:|\/|#|\.)/.test(trimmed)) return trimmed;
         // Allow relative paths (e.g. data/blog/media/image.png) — no protocol = safe relative
         if (/^[a-zA-Z0-9_\-][a-zA-Z0-9_.\-\/]*$/.test(trimmed)) return trimmed;
         return null;