adminforth 2.20.0-next.11 → 2.20.0-next.12
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -233,11 +233,13 @@ export function protectAgainstXSS(value: string) {
|
|
|
233
233
|
"ul", "a", "abbr", "b", "bdi", "bdo", "br", "cite", "code", "data", "dfn",
|
|
234
234
|
"em", "i", "kbd", "mark", "q", "rb", "rp", "rt", "rtc", "ruby", "s", "samp",
|
|
235
235
|
"small", "span", "strong", "sub", "sup", "time", "u", "var", "wbr", "caption",
|
|
236
|
-
"col", "colgroup", "table", "tbody", "td", "tfoot", "th", "thead", "tr", 'img'
|
|
236
|
+
"col", "colgroup", "table", "tbody", "td", "tfoot", "th", "thead", "tr", 'img', 'video', 'source'
|
|
237
237
|
],
|
|
238
238
|
allowedAttributes: {
|
|
239
239
|
'li': [ 'data-list' ],
|
|
240
240
|
'img': [ 'src', 'srcset', 'alt', 'title', 'width', 'height', 'loading' ],
|
|
241
|
+
'video': [ 'src', 'controls', 'autoplay', 'loop', 'muted', 'poster', 'width', 'height', 'autoplay', 'playsinline' ],
|
|
242
|
+
'source': [ 'src', 'type' ],
|
|
241
243
|
// Allow markup on spans (classes & styles), and
|
|
242
244
|
// generic data/aria/style attributes on any element. (e.g. for KaTeX-related previews)
|
|
243
245
|
'span': [ 'class', 'style' ],
|