Hello!

The README mentions that the Docker image supports multi-arch, but that does not appear to be the case here?

https://hub.docker.com/r/cveinnt/letsmarkdown/tags

See https://letsmarkdown.com/spurious-kick-1370

The code tags should follow the font-height for the heading element they are contained in, but they are all exactly font-height: 12px;. I think changing this to a relative value, like font-height: 0.9em; could be sufficient to solve this issue in https://github.com/Cveinnt/LetsMarkdown.com/blob/d53114d36ac265989301c12a52f8a5e72dc25e30/src/components/markdown.css#L109

Moreover, if you browse <insert random MDN docs> as reference, you will see that they are using a font that has an Ascender (space above Capsize, i.e. font height) that balances out with the Descender (space below baseline, i.e. below font).[^1] This leads to the box around the text being more "center" than currently, where there appears to be less space above the font than below it. I'm sure you could find a suitable font for this.

Screenshot of the wrong font-height and missing Ascender, on current Firefox

[^1]: Terminology from https://seek-oss.github.io/capsize/

Please consider adding XSS countermeasures for this product. It's possible to run an arbitrary JavaScript code.

To reproduce

1. go to https://letsmarkdown.com/
2. Get the generated URL ( https://letsmarkdown.com/pink-things-6832 )
3. Add the following details

<img src=1 onerror="console.log(top.document.body.innerHTML='Unexpected_Page')">

4. Ask people to access https://letsmarkdown.com/pink-things-6832

Suggested Fix

Consider disabling HTML feature on src/components/Score.tsx, or use the sanitizer package while HTML is turned on.

https://github.com/Cveinnt/LetsMarkdown.com/blob/d88c75b132e60733a5bc3eae43cf72d82eaafa4d/src/components/Score.tsx#L30

I assume HTML tags are not required for the most of the time.

Reference: https://github.com/markdown-it/markdown-it/blob/master/docs/security.md

Hello,

Thanks for making this, it's very useful! I was hosting the editor behind a Nginx reverse proxy using the Nginx Proxy Manager which I believe is pretty common amongst self-hosting enthusiasts and found out that the "Websockets Support" option was required to be enabled if not you would not be able to connect to the server to save your notes for collaboration. Just mentioning it here in case someone else faces the same problem.

I'm not sure if I am just a newbie, or if there are a few features missing (I understand it's under development and it's early)

My main question is that, I deployed on docker using the instructions, how do I change the volumes so I can change the path at the top? (Seems to default to documents>randomlygeneratedname) Or is this by design? Do I have to install on bare metal to be able to save these files to the system? Not quite sure how it all works.

Assuming there is nothing saved in a database or on the system, and its just a editor to view and collaborate in the browser, then I think an ability to upload a markdown file to continue editing (although you can copy and paste, so this may not be needed) as well as a way to export the document (again, can copy and paste, but a button to import/export would be nice).

Overall, I really like the UI and it's simplicity. Looking forward to this projects future.

I guess when using https://<url>/<file-name> we create a new file to be edited. I do want the files to be stored persistently. How can I achieve this in docker? I can't even use docker exec -it <container-name> sh (or any other shell) to explore the directory structure. tl;dr: what folder to mount using docker, to have possible persistent storage? (maybe include it in the README.md)