Fixes swagger-editor/#1502.

[owenconti]

Fixes swagger-api/swagger-editor#1502.
Fixes #3385.
Fixes #2700.

Change logic for markdown rendering to:

1. Convert source markdown to HTML
2. Sanitize HTML
3. Send sanitized HTML to markdown renderer

Works with the following test specs:

https://gist.github.com/tbarsballe/bb135cd6f65b1341bd4184f003ca8f4d
https://gist.github.com/shockey/e65144c103f4cf3cd501d2c2d1c63b18
https://gist.github.com/shockey/7346f22b0d31b39ae65b2b5fe39a8f51

[owenconti]

I'm going to add various XSS cases to the existing sanitization tests.

[shockey]

This looks good! I had one question, left it as a comment.

I'll hold off on approval/merge until you get around to adding tests.

[shockey]

Since we're using Remarkable directly, do we need react-remarkable anymore?

[owenconti]

Nope, I think we can remove it. I also want to try removing ReactMarkdown from the OAS3 component and replace it with dangerouslySetInnerHTML like in the 2.0 component.

[shockey]

Git merge = 💥

[shockey]

Okay, got it working again 😄

[shockey]

This fixes #3385 as well.

[shockey]

Looks good - I confirmed that the XSS test definitions didn't trigger anything.

[shockey]

Merged so we can release this fix.

I've opened a new issue for the tests that you mentioned, @owenconti.

[ettaramesh]

Its been mentioned that #3385 is being fixed as part of this issue. Could you please let me know which version of swagger-ui has this fix available. I have tested with 3.33.0 and the issue still exists.