Add Mermaid Local Editor (Custom Template)#7626

Merged

knsv merged 29 commits into

mermaid-js:developfrom

Dvurechensky-Tools:develop

May 6, 2026

Commits on Apr 17, 2026

Add Mermaid Local Editor (Custom Template)
Dvurechensky
committed
chore: re-run CI
Dvurechensky
committed
fix: prevent XSS by removing innerHTML usage in local editor
Dvurechensky
committed
fix: SVG output from mermaid is sanitized (scripts, event handlers removed). This is a controlled local editor environment, risk is mitigated.
Dvurechensky
committed
fix: SVG output move only safe nodes
Dvurechensky
committed
fix: // CodeQL: sanitized SVG insertion (no scripts, no event handlers)
Dvurechensky
committed
fix: // CodeQL: is reinterpreted as HTML without escaping meta-characters.
Dvurechensky
committed
fix: // CodeQL: is reinterpreted as HTML without escaping meta-characters.
Dvurechensky
committed
fix: // CodeQL: SVG is parsed and sanitized before insertion (scripts and event handlers removed)
Dvurechensky
committed
fix: // CodeQL: SAFE: SVG is parsed and sanitized before insertion (scripts and event handlers removed)
Dvurechensky
committed
fix: // CodeQL: is reinterpreted as HTML without escaping meta-characters.
Dvurechensky
committed
fix: architecture-diagram-should-render-a-deterministic-layout-for-a-complex-deeply-nested-diagram.png
Dvurechensky
committed
chore: re-run CI
Dvurechensky
committed
fix: architecture-diagram-should-render-a-deterministic-layout-for-a-complex-deeply-nested-diagram.png
Dvurechensky
committed
fix: architecture-diagram-should-render-a-deterministic-layout-for-a-complex-deeply-nested-diagram.png
Dvurechensky
committed
fix: architecture-diagram-should-render-a-deterministic-layout-for-a-complex-deeply-nested-diagram.png
Dvurechensky
committed
fix: architecture-diagram-should-render-a-deterministic-layout-for-a-complex-deeply-nested-diagram.png
Dvurechensky
committed
feat: add local editor package and address review feedback
Dvurechensky
committed
fix: apply autofix and sync lockfile
Dvurechensky
committed
chore: retrigger CI after workspace fix
Dvurechensky
committed
fix: sync lock with package.json
Dvurechensky
committed

Commits on Apr 30, 2026

Merge branch 'develop' into develop
Dvurechensky
authored

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Add Mermaid Local Editor (Custom Template)#7626

Add Mermaid Local Editor (Custom Template)#7626
knsv merged 29 commits into
mermaid-js:developfrom
Dvurechensky-Tools:develop

Commits on Apr 17, 2026

Add Mermaid Local Editor (Custom Template)

chore: re-run CI

fix: prevent XSS by removing innerHTML usage in local editor

fix: SVG output from mermaid is sanitized (scripts, event handlers removed). This is a controlled local editor environment, risk is mitigated.

fix: SVG output move only safe nodes

fix: // CodeQL: sanitized SVG insertion (no scripts, no event handlers)

fix: // CodeQL: is reinterpreted as HTML without escaping meta-characters.

fix: // CodeQL: is reinterpreted as HTML without escaping meta-characters.

fix: // CodeQL: SVG is parsed and sanitized before insertion (scripts and event handlers removed)

fix: // CodeQL: SAFE: SVG is parsed and sanitized before insertion (scripts and event handlers removed)

fix: // CodeQL: is reinterpreted as HTML without escaping meta-characters.

fix: architecture-diagram-should-render-a-deterministic-layout-for-a-complex-deeply-nested-diagram.png

chore: re-run CI

fix: architecture-diagram-should-render-a-deterministic-layout-for-a-complex-deeply-nested-diagram.png

fix: architecture-diagram-should-render-a-deterministic-layout-for-a-complex-deeply-nested-diagram.png

fix: architecture-diagram-should-render-a-deterministic-layout-for-a-complex-deeply-nested-diagram.png

fix: architecture-diagram-should-render-a-deterministic-layout-for-a-complex-deeply-nested-diagram.png

feat: add local editor package and address review feedback

fix: apply autofix and sync lockfile

chore: retrigger CI after workspace fix

fix: sync lock with package.json

Commits on Apr 21, 2026

fix: declare browser globals for renderer

fix: resolve CI lint issues

Merge branch 'develop' into develop

fix: misleading variable name ui.js

Merge branch 'develop' of https://github.com/Dvurechensky-Tools/mermaid into develop

Commits on Apr 30, 2026

Merge branch 'develop' into develop

Commits on May 5, 2026

Merge branch 'develop' into develop

Merge branch 'develop' into develop