Sanitize plugin docs content (#2900)

docs/plugins/woodpecker-plugins/package.json

@@ -28,6 +28,7 @@
   },
   "dependencies": {
     "fuse.js": "^7.0.0",
+    "isomorphic-dompurify": "^1.11.0",
     "yaml": "^2.3.1"
   }
 }

docs/plugins/woodpecker-plugins/src/markdown.ts

@@ -1,3 +1,4 @@
+import DOMPurify from 'isomorphic-dompurify';
 import { marked } from 'marked';
 import { parse as YAMLParse } from 'yaml';
 
@@ -23,5 +24,5 @@ export function getContent(data: string): string {
   if (!content) {
     throw new Error("Can't get the content");
   }
-  return marked(content) as string;
+  return DOMPurify.sanitize(marked(content) as string);
 }