Add <figure> and <figcaption> to default whitelist

* Figure https://developer.mozilla.org/en-US/docs/Web/HTML/Element/figure
* Figcaption https://developer.mozilla.org/en-US/docs/Web/HTML/Element/figcaption

Most RSS feeds are using these tags to wrap around media content. I propose to add these tags to the default whitelist because they don't require any attribute and do not open any XSS vulnerability
This commit is contained in:
Darius Smaliukas
2021-02-19 17:08:18 +02:00
committed by GitHub
parent be1d80c89d
commit 0024eefd42

View File

@@ -36,6 +36,8 @@ function getDefaultWhiteList() {
dl: [],
dt: [],
em: [],
figcaption: [],
figure: [],
font: ["color", "size", "face"],
footer: [],
h1: [],