The sanitization is a bit overzealous, which can remove real content. Example:
render('```sh\n$ gulp test\n```');
Yields
<pre><code class="lang-sh">$ gulp \n</code></pre>\n
The word "test" is removed because pre-sanitization it looks like...
<pre><code class="lang-sh">$ gulp <span class="hljs-built_in">test</span>\n</code></pre>\n
Note the underscore in the hljs-built_in class, which doesn't match the regexp in the sanitizer.
The sanitization is a bit overzealous, which can remove real content. Example:
Yields
The word "test" is removed because pre-sanitization it looks like...
Note the underscore in the
hljs-built_inclass, which doesn't match the regexp in the sanitizer.