mirror of
https://github.com/discourse/discourse.git
synced 2025-09-05 08:59:27 +08:00
FEATURE: whitelist data for themes
This commit is contained in:
parent
939180efa8
commit
d39d2b9352
2 changed files with 11 additions and 1 deletions
|
@ -137,7 +137,12 @@ const DEFAULT_LIST = [
|
|||
'div.quote-controls',
|
||||
'div.title',
|
||||
'div[align]',
|
||||
'div[data-theme-*]',
|
||||
'div[data-*]', /* This may seem a bit much but polls does
|
||||
it anyway and this is needed for themes,
|
||||
special code in sanitizer handles data-*
|
||||
nothing exists for data-theme-* and we
|
||||
don't want to slow sanitize for this case
|
||||
*/
|
||||
'div[dir]',
|
||||
'dl',
|
||||
'dt',
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue