HTML

Markdown and the components cover most needs, but sometimes HTML does the job better. You can write HTML directly in your pages:

#Videos and embeds New in Clay 4

Paste the embed code that YouTube, Vimeo or Figma give you, as it is:

<iframe src="https://www.youtube-nocookie.com/embed/aqz-KE-bpKQ" title="Big Buck Bunny"
  allow="encrypted-media; picture-in-picture" allowfullscreen></iframe>

Embeds fill the width of the page in the shape of a video, also on phones, and load only when readers scroll to them. These services can be embedded:

Frames of any other site are removed: they could show a fake login form inside your docs.

Your own videos go next to the page, like images, and play with <video>:

<video src="img/demo.mp4" poster="img/demo.png" controls muted playsinline></video>

#What Clay removes

Docs are often written by many people, including outside contributors. To keep a page from harming its readers, Clay cleans the HTML of every page with DOMPurify when it builds the site. It removes:

• <script> elements and event handlers like onclick or onerror,
• javascript: links,
• forms and their fields (<form>, <input>, <textarea>, <select>), which could be used for phishing,
• <style> elements and style attributes, which could lay content over the page,
• frames (<iframe>) of sites other than the embeds above.

Everything else, including tables, images, <details> and inline formatting, stays as you wrote it.

<p onclick="steal()">Text</p>   <!-- becomes <p>Text</p> -->
<script>alert(1)</script>       <!-- removed -->