Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-10-26 16:46:12 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: #12887, strip target attribute from remote posts' html

Browse Source
This commit is contained in:
Julian Lam
2024-10-31 11:47:00 -04:00
parent a59dae3f0a
commit 3eb0a0ed57
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
src/activitypub/mocks.js
View File

@@ -29,6 +29,9 @@ const sanitizeConfig = {
allowedClasses: { allowedClasses: {
'*': [], '*': [],
}, },
allowedAttributes: {
a: ['href', 'rel'],
},
}; };
Mocks.profile = async (actors, hostMap) => { Mocks.profile = async (actors, hostMap) => {