Verify an orz document
Check whether a .md.html / .slides.html / .paged.html file
carries the genuine, unmodified orz framework, and scans its content for embedded code.
Everything runs in your browser; the file is parsed inertly and never executed.
What this can and can't tell you
Strong: it hashes the embedded engine bundle and editor and compares them byte-for-byte to the canonical packages published on jsDelivr — so a swapped or tampered framework is caught.
Heuristic: it lists every inline script and flags raw <script> /
on…= handlers and off-CDN loads in the content (the html:true vector). It can surface
red flags but cannot prove arbitrary content is benign.
Limits: the framework check needs the package version to be published (else it reports
“couldn’t fetch canonical”). And this page is only as trustworthy as the site serving it — you’re trusting
markdown.orz.how. A file always remains code; treat unknown ones like programs.