The escaping preset includes script-looking HTML, a remote image URL and a javascript link. None becomes executable or loads a resource.
Blocked content stays inspectable
Labels and raw source remain readable so the preview does not silently erase evidence.
Previewing creates no image request
The image URL is never assigned to img src, keeping the preview local.