svelte-misc

The code is benign documentation, but several examples demonstrate unsafe raw HTML rendering when inputs are not trusted. The primary security concern is cross-site scripting through {@html}, especially the unsanitized Markdown and post.excerpt examples. The DOMPurify example shows an appropriate mitigation. {@debug} can expose values in development logs but does not indicate malware. Review and sanitize all attacker-influenced HTML before insertion.