@@ -6504,9 +6504,9 @@ application, here are some things to keep in mind:
650465044. The HTML generated by pandoc is not guaranteed to be safe.
65056505 If `raw_html` is enabled for the Markdown input, users can
65066506 inject arbitrary HTML. Even if `raw_html` is disabled,
6507− users can include dangerous content in attributes for
6508− headings, spans, and code blocks. To be safe, you should
6509− run all the generated HTML through an HTML sanitizer.
6507+ users can include dangerous content in URLs and attributes.
6508+ To be safe, you should run all the generated HTML through
6509+ an HTML sanitizer.
65106510
65116511# Authors
65126512