From e391a80d6527f2b687b49bfa1b48d027994f2fb8 Mon Sep 17 00:00:00 2001 From: kr4ssi <44404263+kr4ssi@users.noreply.github.com> Date: Wed, 27 Jan 2021 12:25:42 +0100 Subject: [PATCH] Allow alt-attribute on -tags https://www.w3.org/html/wg/wiki/IssueAltAttribute --- src/xss.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/xss.js b/src/xss.js index 7972b009..b6b4fcad 100644 --- a/src/xss.js +++ b/src/xss.js @@ -45,7 +45,7 @@ const ALLOWED_SCHEMES = [ var ATTRIBUTE_MAP = { a: ["href", "name", "target"], font: ["size"], - img: ["src"], + img: ["src", "alt"], marquee: ["behavior", "behaviour", "direction", "scrollamount"], table: ["cellpadding", "cellspacing"], th: ["colspan", "rowspan"],