specter/CyTube
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Merge pull request #465 from Xaekai/3.0

Browse source 
Allow mumble:// links through XSS filter
This commit is contained in:
Calvin Montgomery 2015-04-16 10:45:07 -05:00
parent 84579c0d60 09de27644d
commit 4a7e478f37
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
lib/xss.js
View file

@ -32,6 +32,10 @@ const ALLOWED_ATTRIBUTES = [
"width" "width"
]; ];
const ALLOWED_SCHEMES = [
"mumble"
];
var ATTRIBUTE_MAP = { var ATTRIBUTE_MAP = {
a: ["href", "name", "target"], a: ["href", "name", "target"],
font: ["size"], font: ["size"],
@ -55,6 +59,7 @@ sanitizeHTML.defaults.allowedTags.concat(ALLOWED_TAGS).forEach(function (tag) {
}); });
const SETTINGS = { const SETTINGS = {
allowedSchemes: sanitizeHTML.defaults.allowedSchemes.concat(ALLOWED_SCHEMES),
allowedTags: sanitizeHTML.defaults.allowedTags.concat(ALLOWED_TAGS), allowedTags: sanitizeHTML.defaults.allowedTags.concat(ALLOWED_TAGS),
allowedAttributes: ATTRIBUTE_MAP allowedAttributes: ATTRIBUTE_MAP
}; };