xss on the webpage (bug or feature, no idea)

[esp0xdeadbeef]

There is an simple XSS inside my repo, if you click on the following link, javascript will be executed.

https://htmlpreview.github.io/?https://github.com/esp0xdeadbeef/htmlpreviewxss/blob/main/README.md

[XhmikosR]

@niutech https://lgtm.com/projects/g/htmlpreview/htmlpreview.github.com?mode=list

You can add the CodeQL Action which is the successor of LGTM (both are owned by GitHub).