update

frontend/src/markdown.js

@@ -0,0 +1,31 @@
+import { marked } from 'marked'
+import { markedHighlight } from 'marked-highlight'
+import hljs from 'highlight.js'
+import 'highlight.js/styles/github-dark.css'
+import DOMPurify from 'dompurify'
+
+marked.use(markedHighlight({
+  langPrefix: 'hljs language-',
+  highlight(code, lang) {
+    if (lang && hljs.getLanguage(lang)) {
+      return hljs.highlight(code, { language: lang }).value
+    }
+    return hljs.highlightAuto(code).value
+  },
+}))
+marked.setOptions({ breaks: true, gfm: true })
+
+// Rohes HTML im Markdown (z. B. <p>, <img> ohne Backticks aus Agenten-Output)
+// als Text anzeigen statt rendern — sonst verschluckt der Browser den Inhalt.
+marked.use({
+  renderer: {
+    html(token) {
+      const text = typeof token === 'string' ? token : token.text
+      return text.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;')
+    },
+  },
+})
+
+export function renderMarkdown(text) {
+  return DOMPurify.sanitize(marked.parse(text || ''))
+}