Skip to content

Conversation

dimitrieh
Copy link

Some package READMEs (e.g., node-red-opcua-x) were displaying HTML tags as literal text instead of rendering them. This was caused by HTML entities being stored in escaped form (<img> instead of ) in the database.

The fix unescapes HTML entities before markdown processing to handle cases where HTML tags are stored as <img> instead of . This ensures already-escaped content from storage renders properly while maintaining security through DOMPurify sanitization.

See https://flows.nodered.org/node/node-red-opcua-x

CleanShot 2025-09-03 at 12 03 28@2x

Fixes #122

Some package READMEs (e.g., node-red-opcua-x) were displaying HTML tags as
literal text instead of rendering them. This was caused by HTML entities being
stored in escaped form (&lt;img&gt; instead of <img>) in the database.

The fix unescapes HTML entities before markdown processing to handle cases
where HTML tags are stored as &lt;img&gt; instead of <img>. This ensures
already-escaped content from storage renders properly while maintaining
security through DOMPurify sanitization.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

HTML visible in the NR install palette list
1 participant