specter/CyTube
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Allow mumble:// links through XSS filter

Browse source
This commit is contained in:
Xaekai 2015-04-15 23:07:12 -07:00
parent 976228683b
commit 09de27644d
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
lib/xss.js
View file

@ -32,6 +32,10 @@ const ALLOWED_ATTRIBUTES = [
"width" "width"
]; ];
const ALLOWED_SCHEMES = [
"mumble"
];
var ATTRIBUTE_MAP = { var ATTRIBUTE_MAP = {
a: ["href", "name", "target"], a: ["href", "name", "target"],
font: ["size"], font: ["size"],
@ -55,6 +59,7 @@ sanitizeHTML.defaults.allowedTags.concat(ALLOWED_TAGS).forEach(function (tag) {
}); });
const SETTINGS = { const SETTINGS = {
allowedSchemes: sanitizeHTML.defaults.allowedSchemes.concat(ALLOWED_SCHEMES),
allowedTags: sanitizeHTML.defaults.allowedTags.concat(ALLOWED_TAGS), allowedTags: sanitizeHTML.defaults.allowedTags.concat(ALLOWED_TAGS),
allowedAttributes: ATTRIBUTE_MAP allowedAttributes: ATTRIBUTE_MAP
}; };