Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-10-31 11:05:54 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix(deps): update dependency sanitize-html to v2

Browse Source
This commit is contained in:
Renovate Bot
2020-09-29 13:34:24 -04:00
committed by Julian Lam
parent 84f5e4cf3d
commit 1e5621c049
2 changed files with 5 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
install/package.json
View File

@@ -108,7 +108,7 @@
"request-promise-native": "^1.0.8", "request-promise-native": "^1.0.8",
"rimraf": "3.0.2", "rimraf": "3.0.2",
"rss": "^1.2.2", "rss": "^1.2.2",
"sanitize-html": "^1.23.0", "sanitize-html": "^2.0.0",
"semver": "^7.2.1", "semver": "^7.2.1",
"serve-favicon": "^2.5.0", "serve-favicon": "^2.5.0",
"sharp": "0.26.1", "sharp": "0.26.1",

8
src/posts/parse.js
View File

@@ -14,15 +14,13 @@ var utils = require('../utils');
let sanitizeConfig = { let sanitizeConfig = {
allowedTags: sanitize.defaults.allowedTags.concat([ allowedTags: sanitize.defaults.allowedTags.concat([
// Some safe-to-use tags to add // Some safe-to-use tags to add
'span', 'a', 'pre', 'small', 'sup', 'ins', 'del', 'img', 'button',
'sup', 'sub', 'u', 'del',
'video', 'audio', 'iframe', 'embed', 'video', 'audio', 'iframe', 'embed',
'img', 'tfoot', 'h1', 'h2', // 'sup' still necessary until https://github.com/apostrophecms/sanitize-html/pull/422 merged
's', 'button', 'i',
]), ]),
allowedAttributes: { allowedAttributes: {
...sanitize.defaults.allowedAttributes, ...sanitize.defaults.allowedAttributes,
a: ['href', 'hreflang', 'media', 'rel', 'target', 'type'], a: ['href', 'name', 'hreflang', 'media', 'rel', 'target', 'type'],
img: ['alt', 'height', 'ismap', 'src', 'usemap', 'width', 'srcset'], img: ['alt', 'height', 'ismap', 'src', 'usemap', 'width', 'srcset'],
iframe: ['height', 'name', 'src', 'width'], iframe: ['height', 'name', 'src', 'width'],
video: ['autoplay', 'controls', 'height', 'loop', 'muted', 'poster', 'preload', 'src', 'width'], video: ['autoplay', 'controls', 'height', 'loop', 'muted', 'poster', 'preload', 'src', 'width'],