Kim Shepherd authored and github-actions[bot] committed 85f1ba21769
Always sanitize HTML in dsMarkdown even if markdown disabled
Instead of setting innerHTML directly to value, sanitize
the value, even if not passing to renderMarkdown/Mathjax
(cherry picked from commit 8fb4772b6c6308d2ba9e358e2858244105064c7f)