Neutralizes resources that would otherwise load or execute automatically.
Active embedded content (iframe, frame, object, embed) is always blocked because it can
run active content with the IDE's origin, which is unsafe even for trusted, user-authored Markdown.
External URL resources (images, stylesheets, SVG references, ...) are only blocked when
blockExternalUrls is true; trusted content passes false to render them directly.
Neutralizes resources that would otherwise load or execute automatically.
Active embedded content (
iframe,frame,object,embed) is always blocked because it can run active content with the IDE's origin, which is unsafe even for trusted, user-authored Markdown. External URL resources (images, stylesheets, SVG references, ...) are only blocked when blockExternalUrls istrue; trusted content passesfalseto render them directly.