@Kirino @RustyCrab @cassidyclown @diurnalfreak666 @mischievoustomato
> It's apart of the parser which cleans up potential malicious code?
Depends on the point of view. It shouldn't interpret what it got from backend as something safe IMO. It should check if the content makes sense and escape what doesn't make sense. If I send you an HTML formatted message with line-height: 1000px, do you expect the frontend to break and display it with that CSS? Probably not. Same goes for the tag, it should check if it tag is supposed to be interpreted or not.