Aedis UI

Markdown

Renders untrusted markdown from agents or users.

Proposal for Acme:

  • 4 days a month
  • terms · bad

raw html is dropped

Installation

Once per app, set up Aedis UI. The CLI verifies the signed release before writing anything and pins every dependency:

npx @aedis/cli@0.1.0 init

Import the theme once in your global CSS, after Tailwind:

app/globals.css
@import "tailwindcss";@import "./styles/aedis-theme.css";

Then add the component:

npx @aedis/cli@0.1.0 add markdown# pnpm dlx @aedis/cli@0.1.0 add markdown · yarn dlx @aedis/cli@0.1.0 add markdown · bunx @aedis/cli@0.1.0 add markdown

Props

PropTypeDefaultDescription
childrenstring—The markdown.
allowImagesbooleanfalseRender images. Off by default: image URLs leak the reader's IP and read receipts.

Security

  • Raw HTML is never rendered (no rehype-raw).
  • Only http, https, mailto and relative URLs survive; javascript:, data: and others become plain text.
  • External links open in a new tab with rel="noopener noreferrer".