[{"data":1,"prerenderedAt":68},["ShallowReactive",2],{"docs:\u002Fen\u002Fdocs\u002Freference\u002Fsecurity":3},{"id":4,"title":5,"body":6,"description":58,"extension":59,"meta":60,"navigation":63,"path":64,"seo":65,"stem":66,"__hash__":67},"docs_en\u002Fen\u002Fdocs\u002Freference\u002Fsecurity.md","Content security",{"type":7,"value":8,"toc":50},"minimark",[9,14,18,22,25,29,32,36],[10,11,13],"h2",{"id":12},"validate-imports","Validate imports",[15,16,17],"p",{},"ViText cleans HTML and checks supported tags, attributes and addresses before document import. Confirming formatting loss does not permit scripts or unsafe URLs. Client cleanup is not a substitute for validating stored\u002Fpublished content in your server application.",[10,19,21],{"id":20},"restricted-css","Restricted CSS",[15,23,24],{},"Only supported tag selectors and text-formatting properties are accepted. Classes\u002FIDs, at-rules, pseudo-selectors, url(), positioning, variables and !important are rejected. Invalid CSS rejects the complete operation rather than applying a partial stylesheet.",[10,26,28],{"id":27},"isolation","Isolation",[15,30,31],{},"Document styles live in Shadow DOM. HTML\u002FCSS exports are separate data; your publishing application must provide its own isolation. Trust sourceModuleURL\u002FcodecsModuleURL because they load executable resources. Do not accept arbitrary user URLs for those modules.",[10,33,35],{"id":34},"application-services","Application services",[15,37,38,39,44,45,49],{},"Your application owns file uploads, authentication, storage and policy. AI keys and authorization belong on its server. The Community website demo does not call an AI service. URL images and browser spellcheck can still use browser\u002Fnetwork services. ",[40,41,43],"a",{"href":42},"\u002Fen\u002Fdocs\u002Fguides\u002Fimages","Images",", ",[40,46,48],{"href":47},"\u002Fen\u002Fprivacy","privacy",".",{"title":51,"searchDepth":52,"depth":52,"links":53},"",2,[54,55,56,57],{"id":12,"depth":52,"text":13},{"id":20,"depth":52,"text":21},{"id":27,"depth":52,"text":28},{"id":34,"depth":52,"text":35},"HTML cleanup, CSS policy and application responsibilities.","md",{"group":61,"order":62},"API reference",46,true,"\u002Fen\u002Fdocs\u002Freference\u002Fsecurity",{"title":5,"description":58},"en\u002Fdocs\u002Freference\u002Fsecurity","WlpCdj4UosB1qyeofgZBih8Tb_Ax1-EmYp1RHfDGDBk",1792670389608]