Is GitLab Markdown Viewer safe?
GitLab Markdown Viewer renders local Markdown files with raw HTML that can run unstripped event handlers.
When you open a local .md or .markdown file, the extension replaces the page with HTML rendered from that file. It allows raw HTML and removes only a short list of event-handler attributes, so crafted Markdown can still run page JavaScript through other event attributes.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes iteph - no other listings under this identity, 2 shared hostnames
eph - no other listings under this identity, 2 shared hostnames
What this publisher told the store about itself, and the other listings that told it the same thing.
Shared hosts - 2 hostnames
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.