Skip to content
This repository was archived by the owner on Sep 11, 2024. It is now read-only.

Commit f37ae1e

Browse files
authored
Fix sanitise html warning about unsafe tags (#10384)
1 parent 0cfd97b commit f37ae1e

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

src/utils/Reply.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -56,7 +56,7 @@ export function stripHTMLReply(html: string): string {
5656
return sanitizeHtml(html, {
5757
allowedTags: false, // false means allow everything
5858
allowedAttributes: false,
59-
allowVulnerableTags: false, // silence xss warning, we won't be rendering directly this, so it is safe to do
59+
allowVulnerableTags: true, // silence xss warning, we won't be rendering directly this, so it is safe to do
6060
// we somehow can't allow all schemes, so we allow all that we
6161
// know of and mxc (for img tags)
6262
allowedSchemes: [...PERMITTED_URL_SCHEMES, "mxc"],

0 commit comments

Comments
 (0)