Skip to content

Implement block container feature for security - secure by default for all renderers #78

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Copilot wants to merge 19 commits into
base: main
Choose a base branch
from
Open

Implement block container feature for security - secure by default for all renderers #78

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
19 commits
Select commit Hold shift + click to select a range
2158a55
Initial plan
Copilot Feb 8, 2026
0daaa2c
Add shadow DOM support to renderToDOM function
Copilot Feb 8, 2026
a490152
Add shadow DOM documentation to README
Copilot Feb 8, 2026
0d64e4f
Refactor renderToDOM to eliminate code duplication
Copilot Feb 8, 2026
6901bab
Address code review: improve boolean conversion and add container com…
Copilot Feb 8, 2026
3f10c0f
Add comprehensive shadow DOM analysis report
Copilot Feb 8, 2026
133f5ff
Add analysis of positioning attack vector and mitigation strategies
Copilot Feb 8, 2026
0a44730
Revise analysis: shadow DOM prevents page overlay attacks
Copilot Feb 8, 2026
c1c1f27
Critical revision: address user-generated templates and block containers
Copilot Feb 8, 2026
b2d3bcd
Add crisp security analysis report as requested
Copilot Feb 8, 2026
f12cc9c
Revert all code implementation, keep only analysis reports
Copilot Feb 8, 2026
58f1074
Implement block container feature with CSS containment and isolation
Copilot Feb 8, 2026
a767b5c
Add block container documentation to README files
Copilot Feb 8, 2026
947442f
Add block container support to renderToString
Copilot Feb 8, 2026
e6583cf
Update DOM tests to account for new default block container behavior
Copilot Feb 8, 2026
75b7969
Address code review feedback and improve comment clarity
Copilot Feb 8, 2026
8e1b2f4
Update markdown-it-treebark tests for new default block container beh…
Copilot Feb 8, 2026
a6b96c4
Make block container the default for security, add to markdown-it plugin
Copilot Feb 8, 2026
df1907b
Update documentation to reflect block container as default
Copilot Feb 8, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1173,6 +1173,7 @@ div:

- [Node.js/Browser](nodejs/packages/treebark/)
- [Core library](nodejs/packages/treebark) with `renderToString` and `renderToDOM` renderers
- `renderToDOM` supports block container mode for security (prevents positioning attacks on page elements)
- [markdown-it plugin](nodejs/packages/markdown-it-treebark/) - Render treebark templates in Markdown
- **Other Languages** - Not yet available. If you need treebark support for your language, please [file a feature request](https://github.com/danmarshall/treebark/issues/new)

Expand Down
Loading