2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-09-05 08:59:27 +08:00

FEATURE: whitelist data for themes

This commit is contained in:
Sam 2018-03-02 14:51:50 +11:00
parent 939180efa8
commit d39d2b9352
2 changed files with 11 additions and 1 deletions

View file

@ -137,7 +137,12 @@ const DEFAULT_LIST = [
'div.quote-controls',
'div.title',
'div[align]',
'div[data-theme-*]',
'div[data-*]', /* This may seem a bit much but polls does
it anyway and this is needed for themes,
special code in sanitizer handles data-*
nothing exists for data-theme-* and we
don't want to slow sanitize for this case
*/
'div[dir]',
'dl',
'dt',