From 3ff54b8e4bf8922a656c57b2f7c4fd4e2cd1b506 Mon Sep 17 00:00:00 2001 From: Shell Turner Date: Sun, 2 Apr 2017 11:19:50 +0100 Subject: [PATCH] Add
    to allowed attributes list Fixes vector-im/riot-web#3273 Signed-off-by: Shell Turner --- src/HtmlUtils.js | 1 + 1 file changed, 1 insertion(+) diff --git a/src/HtmlUtils.js b/src/HtmlUtils.js index c7b13bc071..ad91d2f61f 100644 --- a/src/HtmlUtils.js +++ b/src/HtmlUtils.js @@ -96,6 +96,7 @@ var sanitizeHtmlParams = { // We don't currently allow img itself by default, but this // would make sense if we did img: ['src'], + ol: ['start'], }, // Lots of these won't come up by default because we don't allow them selfClosing: ['img', 'br', 'hr', 'area', 'base', 'basefont', 'input', 'link', 'meta'],