make mentions work again

Author: visualjerk

package.json

@@ -103,7 +103,7 @@
     "mongoose": "~4.13.2",
     "multer": "~1.3.0",
     "node-sass": "~4.7.2",
-    "quill-url-embeds": "https://github.com/Human-Connection/quill-url-embeds.git",
+    "quill-url-embeds": "^1.0.6",
     "raven": "~2.4.0",
     "request": "~2.83.0",
     "request-promise": "~4.2.2",

server/hooks/xss.js

@@ -9,15 +9,15 @@ function clean (dirty) {
   const $ = cheerio.load(dirty);
   $('div[data-url-embed]').each((i, el) => {
     let url = el.attribs['data-url-embed'];
-    let aTag = $(`<a href="${url}" target="_blank">${url}</a>`);
+    let aTag = $(`<a href="${url}" target="_blank" data-url-embed>${url}</a>`);
     $(el).replaceWith(aTag);
   })
   dirty = $('body').html();
 
   dirty = sanitizeHtml(dirty, {
     allowedTags: ['iframe', 'img', 'p', 'br', 'b', 'i', 'em', 'strong', 'a', 'pre', 'ul', 'li', 'ol', 'span'],
     allowedAttributes: {
-      a: ['href', 'target', 'data-*'],
+      a: ['href', 'class', 'target', 'data-*'],
       img: [ 'src' ],
       iframe: ['src', 'class', 'frameborder', 'allowfullscreen']
     },
@@ -27,15 +27,6 @@ function clean (dirty) {
     },
     transformTags: {
       i: 'em',
-      a: function (tagName, attribs) {
-        return {
-          tagName: 'a',
-          attribs: {
-            href: attribs.href,
-            target: '_blank'
-          }
-        };
-      },
       b: 'strong'
     //   'img': function (tagName, attribs) {
     //     let src = attribs.src;

yarn.lock

@@ -399,6 +399,14 @@ babel-messages@^6.23.0:
   dependencies:
     babel-runtime "^6.22.0"
 
+babel-polyfill@^6.26.0:
+  version "6.26.0"
+  resolved "https://registry.yarnpkg.com/babel-polyfill/-/babel-polyfill-6.26.0.tgz#379937abc67d7895970adc621f284cd966cf2153"
+  dependencies:
+    babel-runtime "^6.26.0"
+    core-js "^2.5.0"
+    regenerator-runtime "^0.10.5"
+
 babel-runtime@^6.22.0, babel-runtime@^6.26.0:
   version "6.26.0"
   resolved "https://registry.yarnpkg.com/babel-runtime/-/babel-runtime-6.26.0.tgz#965c7058668e82b55d7bfe04ff2337bc8b5647fe"
@@ -1061,7 +1069,7 @@ copy-descriptor@^0.1.0:
   version "0.1.1"
   resolved "https://registry.yarnpkg.com/copy-descriptor/-/copy-descriptor-0.1.1.tgz#676f6eb3c39997c2ee1ac3a924fd6124748f578d"
 
-core-js@^2.4.0, core-js@^2.4.1:
+core-js@^2.4.0, core-js@^2.4.1, core-js@^2.5.0:
   version "2.5.3"
   resolved "https://registry.yarnpkg.com/core-js/-/core-js-2.5.3.tgz#8acc38345824f16d8365b7c9b4259168e8ed603e"
 
@@ -4397,11 +4405,12 @@ quill-delta@^3.6.2:
     extend "^3.0.1"
     fast-diff "1.1.2"
 
-"quill-url-embeds@https://github.com/Human-Connection/quill-url-embeds.git":
-  version "1.0.0"
-  resolved "https://github.com/Human-Connection/quill-url-embeds.git#8d21445f52a83422163f57ba57902f0dd62c0253"
+quill-url-embeds@^1.0.6:
+  version "1.0.6"
+  resolved "https://registry.yarnpkg.com/quill-url-embeds/-/quill-url-embeds-1.0.6.tgz#e2b9f8ea73d254efd5f90578c79210e787fad068"
   dependencies:
     axios "^0.18.0"
+    babel-polyfill "^6.26.0"
     cheerio "^1.0.0-rc.2"
     lodash "^4.17.5"
     quill "^1.3.6"
@@ -4526,6 +4535,10 @@ [email protected]:
   version "1.1.0"
   resolved "https://registry.yarnpkg.com/referrer-policy/-/referrer-policy-1.1.0.tgz#35774eb735bf50fb6c078e83334b472350207d79"
 
+regenerator-runtime@^0.10.5:
+  version "0.10.5"
+  resolved "https://registry.yarnpkg.com/regenerator-runtime/-/regenerator-runtime-0.10.5.tgz#336c3efc1220adcedda2c9fab67b5a7955a33658"
+
 regenerator-runtime@^0.11.0:
   version "0.11.1"
   resolved "https://registry.yarnpkg.com/regenerator-runtime/-/regenerator-runtime-0.11.1.tgz#be05ad7f9bf7d22e056f9726cee5017fbf19e2e9"