Fix image injection for custom markup

2021-06-25 15:10:39 +02:00 · 2021-06-25 15:10:39 +02:00 · 0d25c59414
parent 2370d9cc4a
commit 0d25c59414
1 changed files with 3 additions and 1 deletions
--- a/shared/core-utils/renderer/html.ts
+++ b/shared/core-utils/renderer/html.ts
@ -30,11 +30,13 @@ export function getCustomMarkupSanitizeOptions (additionalAllowedTags: string[]
    allowedTags: [
      ...base.allowedTags,
      ...additionalAllowedTags,
-      'div', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6'
+      'div', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'img'
    ],
    allowedSchemes: base.allowedSchemes,
    allowedAttributes: {
      ...base.allowedAttributes,
+
+      'img': [ 'src', 'alt' ],
      '*': [ 'data-*', 'style' ]
    }
  }