build1 distinct publisher
DOMPurify's svg profile strips the foreignObject carrying Mermaid labels in four of five diagram types
A green CodeQL run and a two-line sanitiser call would have left the boxes and arrows intact on four of five Mermaid diagram types while quietly deleting the text inside them. Counting elements is what caught it.
Publishers:dev.to
Reality
- Evidence58
- Adoption30
- Hype gap−8
- Incentives35