1.136.2: Merged PR 759: Fix MSRC 134488

发生了什么

Validate media-loading sources while sanitizing chat Markdown, before the sanitized fragment is attached to a DOM node and can initiate a request. Apply validation to source and poster attributes, reject network-backed file resources, and preserve the existing plaintext fallback and genuinely local file/data image support. Add focused sanitizer, Markdown renderer, and chat renderer regression coverage. Issue: https:…

摘要按规则整理自下方来源原文

来源