AIKIDO-2026-460419

TL;DR

The package bundles the DocSearch React UI, whose Ask AI feature renders assistant-generated markdown answers as HTML. Before the fix, answer text was converted to HTML with marked and injected through dangerouslySetInnerHTML without sanitization, so raw HTML tags and unsafe link schemes in the answer were rendered verbatim. Content that reaches the assistant response, such as poisoned indexed documentation, can execute arbitrary JavaScript in the browser of a user viewing the answer. The fix routes markdown through a sanitizing pipeline that escapes raw HTML, allowlists code-fence language identifiers, and blocks unsafe URL schemes.