feat: allow rendering data uri scheme if ALLOW_UNSAFE_DATA_SCHEME is true

web/app/components/base/markdown-blocks/utils.ts

@@ -1,3 +1,7 @@
+import { ALLOW_UNSAFE_DATA_SCHEME } from '@/config'
+
 export const isValidUrl = (url: string): boolean => {
-  return ['http:', 'https:', '//', 'mailto:'].some(prefix => url.startsWith(prefix))
+  const validPrefixes = ['http:', 'https:', '//', 'mailto:']
+  if (ALLOW_UNSAFE_DATA_SCHEME) validPrefixes.push('data:')
+  return validPrefixes.some(prefix => url.startsWith(prefix))
 }

web/app/components/base/markdown/markdown-utils.ts

@@ -4,6 +4,7 @@
  * Includes preprocessing for LaTeX and custom "think" tags.
  */
 import { flow } from 'lodash-es'
+import { ALLOW_UNSAFE_DATA_SCHEME } from '@/config'
 
 export const preprocessLaTeX = (content: string) => {
   if (typeof content !== 'string')
@@ -83,5 +84,8 @@ export const customUrlTransform = (uri: string): string | undefined => {
   if (PERMITTED_SCHEME_REGEX.test(scheme))
     return uri
 
+  if (ALLOW_UNSAFE_DATA_SCHEME && scheme === 'data:')
+    return uri
+
   return undefined
 }