Use dompurify to sanitize markedown rendering

apps/desktop/src/components/CommitCard.svelte

@@ -27,8 +27,8 @@
 	import Tooltip from '@gitbutler/ui/Tooltip.svelte';
 	import PopoverActionsContainer from '@gitbutler/ui/popoverActions/PopoverActionsContainer.svelte';
 	import PopoverActionsItem from '@gitbutler/ui/popoverActions/PopoverActionsItem.svelte';
+	import { marked } from '@gitbutler/ui/utils/marked';
 	import { getTimeAgo } from '@gitbutler/ui/utils/timeAgo';
-	import { marked } from 'marked';
 	import { type Snippet } from 'svelte';
 
 	const userService = getContext(UserService);

apps/desktop/src/components/v3/StackDetailsCommitHeader.svelte

@@ -9,8 +9,8 @@
 	import Icon from '@gitbutler/ui/Icon.svelte';
 	import Modal from '@gitbutler/ui/Modal.svelte';
 	import Tooltip from '@gitbutler/ui/Tooltip.svelte';
+	import { marked } from '@gitbutler/ui/utils/marked';
 	import { getTimeAgo } from '@gitbutler/ui/utils/timeAgo';
-	import { marked } from 'marked';
 	import type { Commit, WorkspaceBranch } from '$lib/branches/v3';
 
 	interface Props {

apps/web/src/routes/downloads/+page.svelte

@@ -1,5 +1,5 @@
 <script lang="ts">
-	import { marked } from 'marked';
+	import { marked } from '@gitbutler/ui/utils/marked';
 	import type { Build, Release } from '$lib/types/releases';
 
 	interface Props {

apps/web/src/routes/projects/[projectId]/branches/[branchId]/stack/[changeId]/+page.svelte

@@ -1,8 +1,8 @@
 <script lang="ts">
 	import { getContext } from '@gitbutler/shared/context';
 	import { HttpClient } from '@gitbutler/shared/network/httpClient';
+	import { marked } from '@gitbutler/ui/utils/marked';
 	import hljs from 'highlight.js';
-	import { marked } from 'marked';
 	import { onMount } from 'svelte';
 	import { env } from '$env/dynamic/public';
 

packages/ui/package.json

@@ -68,6 +68,7 @@
 		"cpy-cli": "^5.0.0",
 		"dayjs": "^1.11.13",
 		"diff-match-patch": "^1.0.5",
+		"isomorphic-dompurify": "^2.22.0",
 		"marked": "catalog:",
 		"playwright": "1.47.0",
 		"postcss": "^8.4.49",

packages/ui/src/lib/utils/marked.ts

@@ -0,0 +1,6 @@
+import DOMPurify from 'isomorphic-dompurify';
+import { marked as markedLib } from 'marked';
+
+// eslint-disable-next-line func-style
+export const marked: (arg: string) => string = (value: string) =>
+	DOMPurify.sanitize(markedLib.parse(value, { async: false }));