Add <figure> and <figcaption> to default whitelist
* Figure https://developer.mozilla.org/en-US/docs/Web/HTML/Element/figure * Figcaption https://developer.mozilla.org/en-US/docs/Web/HTML/Element/figcaption Most RSS feeds are using these tags to wrap around media content. I propose to add these tags to the default whitelist because they don't require any attribute and do not open any XSS vulnerability
This commit is contained in:
@@ -36,6 +36,8 @@ function getDefaultWhiteList() {
|
|||||||
dl: [],
|
dl: [],
|
||||||
dt: [],
|
dt: [],
|
||||||
em: [],
|
em: [],
|
||||||
|
figcaption: [],
|
||||||
|
figure: [],
|
||||||
font: ["color", "size", "face"],
|
font: ["color", "size", "face"],
|
||||||
footer: [],
|
footer: [],
|
||||||
h1: [],
|
h1: [],
|
||||||
|
|||||||
Reference in New Issue
Block a user