diff --git a/package.json b/package.json index feddf496..e335e695 100644 --- a/package.json +++ b/package.json @@ -2,7 +2,7 @@ "author": "Calvin Montgomery", "name": "CyTube", "description": "Online media synchronizer and chat", - "version": "3.18.0", + "version": "3.18.1", "repository": { "url": "http://github.com/calzoneman/sync" }, diff --git a/src/xss.js b/src/xss.js index 5c3fe3c8..a6385f2b 100644 --- a/src/xss.js +++ b/src/xss.js @@ -5,6 +5,7 @@ var sanitizeHTML = require("sanitize-html"); const ALLOWED_TAGS = [ "button", "center", + "cite" "details", "font", "h1", @@ -13,8 +14,12 @@ const ALLOWED_TAGS = [ "marquee", // It pains me to do this, but a lot of people use it... "s", "section", + "small", "span", - "summary" + "sub", + "summary", + "sup", + "template" ]; const ALLOWED_ATTRIBUTES = [