sorb/ThreadNet-Web
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 4 Wiki Activity

Fix sanitise html warning about unsafe tags (#10384)

Browse Source
This commit is contained in:
Michael Telatynski
2023-03-15 12:56:15 +00:00
committed by GitHub
parent 0cfd97b180
commit f37ae1e230
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/utils/Reply.ts
+1 -1
View File
@@ -56,7 +56,7 @@ export function stripHTMLReply(html: string): string {
return sanitizeHtml(html, { return sanitizeHtml(html, {
allowedTags: false, // false means allow everything allowedTags: false, // false means allow everything
allowedAttributes: false, allowedAttributes: false,
allowVulnerableTags: false, // silence xss warning, we won't be rendering directly this, so it is safe to do allowVulnerableTags: true, // silence xss warning, we won't be rendering directly this, so it is safe to do
// we somehow can't allow all schemes, so we allow all that we // we somehow can't allow all schemes, so we allow all that we
// know of and mxc (for img tags) // know of and mxc (for img tags)
allowedSchemes: [...PERMITTED_URL_SCHEMES, "mxc"], allowedSchemes: [...PERMITTED_URL_SCHEMES, "mxc"],