Merge pull request #310 from QuietMisdreavus/readme-data-urls

don't render raw html or data/javascript URLs in crate readmes

Author: onur

src/web/mod.rs

@@ -359,6 +359,7 @@ fn render_markdown(text: &str) -> String {
 
     let options = {
         let mut options = ComrakOptions::default();
+        options.safe = true;
         options.ext_superscript = true;
         options.ext_table = true;
         options.ext_autolink = true;