moon
/
sync
mirror of https://github.com/calzoneman/sync.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Allow mumble:// links through XSS filter

This commit is contained in:
Xaekai 2015-04-15 23:07:12 -07:00
parent 976228683b
commit 09de27644d
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
lib/xss.js
View File

@ -32,6 +32,10 @@ const ALLOWED_ATTRIBUTES = [
"width"
];
const ALLOWED_SCHEMES = [
"mumble"
];
var ATTRIBUTE_MAP = {
a: ["href", "name", "target"],
font: ["size"],
@ -55,6 +59,7 @@ sanitizeHTML.defaults.allowedTags.concat(ALLOWED_TAGS).forEach(function (tag) {
});
const SETTINGS = {
allowedSchemes: sanitizeHTML.defaults.allowedSchemes.concat(ALLOWED_SCHEMES),
allowedTags: sanitizeHTML.defaults.allowedTags.concat(ALLOWED_TAGS),
allowedAttributes: ATTRIBUTE_MAP
};