Merge pull request #189 from sijanec/patch-1

added support for src embedded image, ftp and relative urls
2020-06-08 10:40:44 +08:00
parent a48d842cbb 8efd6327ae
commit 154174dd9e
1 changed files with 4 additions and 0 deletions
--- a/lib/default.js
+++ b/lib/default.js
@@ -159,6 +159,10 @@ function safeAttrValue(tag, name, value, cssFilter) {
        value.substr(0, 8) === "https://" ||
        value.substr(0, 7) === "mailto:" ||
        value.substr(0, 4) === "tel:" ||
+        value.substr(0, 11) === "data:image/" ||
+        value.substr(0, 6) === "ftp://" ||
+        value.substr(0, 2) === "./" ||
+        value.substr(0, 3) === "../" ||
        value[0] === "#" ||
        value[0] === "/"
      )