Allow span...

kegsay · kegsay · commit 63a998ceb770 · 2017-05-30T17:37:13.000+01:00
diff --git a/src/languageHandler.js b/src/languageHandler.js
@@ -86,7 +86,7 @@ export function _tJsx(jsxText, patterns, subs) {
     // tJsxText may be unsafe if malicious translators try to inject HTML.
     // Run this through sanitize-html and bail if the output isn't identical
     const tJsxText = _t(jsxText);
-    const sanitized = sanitizeHtml(tJsxText);
+    const sanitized = sanitizeHtml(tJsxText, { allowedTags: sanitizeHtml.defaults.allowedTags.concat([ 'span' ]) });
     if (tJsxText !== sanitized) {
         throw new Error(`_tJsx: translator error. untrusted HTML supplied. '${tJsxText}' != '${sanitized}'`);
     }

Original file line number	Diff line number	Diff line change
`@@ -86,7 +86,7 @@ export function _tJsx(jsxText, patterns, subs) {`
`86`	`86`	`// tJsxText may be unsafe if malicious translators try to inject HTML.`
`87`	`87`	`// Run this through sanitize-html and bail if the output isn't identical`
`88`	`88`	`const tJsxText = _t(jsxText);`
`89`		`- const sanitized = sanitizeHtml(tJsxText);`
	`89`	`+ const sanitized = sanitizeHtml(tJsxText, { allowedTags: sanitizeHtml.defaults.allowedTags.concat([ 'span' ]) });`
`90`	`90`	`if (tJsxText !== sanitized) {`
`91`	`91`	throw new Error(`_tJsx: translator error. untrusted HTML supplied. '${tJsxText}' != '${sanitized}'`);
`92`	`92`	`}`