dawy_go/vnote
1
0
Fork 0
mirror of https://gitee.com/vnotex/vnote.git synced 2025-07-04 21:39:52 +08:00
Code Issues Packages Projects Releases Wiki Activity

update xss whitelist

Browse Source
This commit is contained in:
Le Tan 2024-07-18 23:20:32 +08:00
parent 05078a7857
commit 78de724757
1 changed files with 9 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
src/data/extra/web/js/markdownit.js
View File

@ -213,13 +213,15 @@ class MarkdownIt extends VxWorker {
() => { () => {
this.mdit.use(window.markdownItXSS, { this.mdit.use(window.markdownItXSS, {
whiteList: { whiteList: {
input: ["class", "disabled", "type", "checked"], input: ["style", "class", "disabled", "type", "checked"],
mark: ["class"], mark: ["style", "class"],
font: ["color", "class"], font: ["style", "color", "class"],
sub: ["class"], sub: ["style", "class"],
sup: ["class"], sup: ["style", "class"],
details: ["class"], details: ["style", "class"],
summary: ["class"], summary: ["style", "class"],
ins: ["style", "class"],
span: ["style", "class"],
} }
}); });
}); });