From f37ae1e230793232fcec65ae2b3ce1f15c2a630a Mon Sep 17 00:00:00 2001 From: Michael Telatynski <7t3chguy@gmail.com> Date: Wed, 15 Mar 2023 12:56:15 +0000 Subject: [PATCH] Fix sanitise html warning about unsafe tags (#10384) --- src/utils/Reply.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/utils/Reply.ts b/src/utils/Reply.ts index 99730b687d..14ff4058e1 100644 --- a/src/utils/Reply.ts +++ b/src/utils/Reply.ts @@ -56,7 +56,7 @@ export function stripHTMLReply(html: string): string { return sanitizeHtml(html, { allowedTags: false, // false means allow everything allowedAttributes: false, - allowVulnerableTags: false, // silence xss warning, we won't be rendering directly this, so it is safe to do + allowVulnerableTags: true, // silence xss warning, we won't be rendering directly this, so it is safe to do // we somehow can't allow all schemes, so we allow all that we // know of and mxc (for img tags) allowedSchemes: [...PERMITTED_URL_SCHEMES, "mxc"],