From 2c450fc72d3a89faf307e9cbca73db386d22dfd8 Mon Sep 17 00:00:00 2001
From: Abitofevrything <54505189+abitofevrything@users.noreply.github.com>
Date: Thu, 30 Sep 2021 20:12:23 +0200
Subject: [PATCH] Allow HTML nodes in mermaid diagrams (#2192)

---
 src/public/app/services/note_content_renderer.js | 2 +-
 src/public/app/widgets/mermaid.js                | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/public/app/services/note_content_renderer.js b/src/public/app/services/note_content_renderer.js
index bbd3641ca..640096ced 100644
--- a/src/public/app/services/note_content_renderer.js
+++ b/src/public/app/services/note_content_renderer.js
@@ -97,7 +97,7 @@ async function getRenderedContent(note, options = {}) {
         const documentStyle = window.getComputedStyle(document.documentElement);
         const mermaidTheme = documentStyle.getPropertyValue('--mermaid-theme');
 
-        mermaid.mermaidAPI.initialize({ startOnLoad: false, theme: mermaidTheme.trim() });
+        mermaid.mermaidAPI.initialize({ startOnLoad: false, theme: mermaidTheme.trim(), securityLevel: 'antiscript' });
 
         try {
             mermaid.mermaidAPI.render("in-mermaid-graph-" + idCounter++, content,
diff --git a/src/public/app/widgets/mermaid.js b/src/public/app/widgets/mermaid.js
index 4c66348d2..73a250c64 100644
--- a/src/public/app/widgets/mermaid.js
+++ b/src/public/app/widgets/mermaid.js
@@ -54,6 +54,7 @@ export default class MermaidWidget extends NoteContextAwareWidget {
         mermaid.mermaidAPI.initialize({
             startOnLoad: false,
             theme: mermaidTheme.trim(),
+            securityLevel: 'antiscript',
             flow: { useMaxWidth: false },
             sequence: { useMaxWidth: false },
             gantt: { useMaxWidth: false },