Rich text rendering
Editors author HTML; the renderer runs it through DOMPurify against a tight allow-list before output.
- No
<script>,<iframe>, or<form> - No inline event handlers
- No
data-*attributes
You can include links, emphasis, lists, headings, blockquotes, and tables.