Andreas/wekan
1
0
Fork 0
mirror of https://github.com/wekan/wekan.git synced 2026-01-05 00:58:49 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 5

Try to fix Broken Hyperlinks in Markdown to HTML conversion.

Browse source 
Thanks to xet7 !

Fixes #5932
This commit is contained in:
Lauri Ojansivu 2025-10-16 17:47:59 +03:00
parent dd88483ec7
commit bbbd3abf06
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
packages/markdown/src/secureDOMPurify.js
View file

@ -14,7 +14,7 @@ export function getSecureDOMPurifyConfig() {
],
// Block dangerous attributes that can cause XSS and CSS injection
FORBID_ATTR: [
'xlink:href', 'href', 'onload', 'onerror', 'onclick', 'onmouseover',
'xlink:href', 'onload', 'onerror', 'onclick', 'onmouseover',
'onfocus', 'onblur', 'onchange', 'onsubmit', 'onreset', 'onselect',
'onunload', 'onresize', 'onscroll', 'onkeydown', 'onkeyup', 'onkeypress',
'onmousedown', 'onmouseup', 'onmouseover', 'onmouseout', 'onmousemove',