Skip to content
This repository has been archived by the owner on Sep 11, 2024. It is now read-only.

Commit

Permalink
Fix sanitise html warning about unsafe tags (#10384)
Browse files Browse the repository at this point in the history
  • Loading branch information
t3chguy authored Mar 15, 2023
1 parent 0cfd97b commit f37ae1e
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion src/utils/Reply.ts
Original file line number Diff line number Diff line change
Expand Up @@ -56,7 +56,7 @@ export function stripHTMLReply(html: string): string {
return sanitizeHtml(html, {
allowedTags: false, // false means allow everything
allowedAttributes: false,
allowVulnerableTags: false, // silence xss warning, we won't be rendering directly this, so it is safe to do
allowVulnerableTags: true, // silence xss warning, we won't be rendering directly this, so it is safe to do
// we somehow can't allow all schemes, so we allow all that we
// know of and mxc (for img tags)
allowedSchemes: [...PERMITTED_URL_SCHEMES, "mxc"],
Expand Down

0 comments on commit f37ae1e

Please sign in to comment.