website/js/markdown.js

WHAT IT DOES

A small Markdown renderer and syntax highlighter.

# Why not a library

Pulling marked and highlight.js off a CDN would be three lines. It would also mean every visitor to a privacy tool's website makes requests to a third party that learns their IP address and what they were reading, and it would mean trusting code nobody here has read. This is a few hundred lines that does what this page needs and nothing else.

# Escaping

Everything is HTML-escaped first, and only the tags this renderer itself emits are ever introduced. Raw HTML in the source Markdown is shown as text rather than injected, so the README cannot inject script into this page even if it were altered upstream.

IN PLAIN WORDS

This turns the project's plain-text documents into the formatted pages you read, including the colours in the code examples.

Most sites borrow somebody else's code from another company's server to do this. That would tell that company your address and what you were reading. This is a few hundred lines written here instead, so nothing about your visit leaves this site.

WHAT CALLS WHAT

Read out of the source: an edge means the callee’s name appears, called, inside the caller’s body. A syntactic reading, not a resolved one.