Built-in

security

What comark's security plugin removes, reported while you write.

What comark's security plugin removes, reported while you write.

import security from 'comark-codemirror/plugins/security'

comark({ plugins: [security()] })

What it adds

  • Lint

For agents

Included in llms():

Security: <script>, <iframe>, <object>, <embed>, <style> and javascript: URLs are removed; do not use inline event handlers.

Copyright © 2026