Chapril/mobilizon.chapril.org-mobilizon
Chapril
/
mobilizon.chapril.org-mobilizon
24
0
Fork 0
Code Issues Pull Requests Releases Activity

Allow all rel values for event & post links in descriptions 

Signed-off-by: Thomas Citharel <tcit@tcit.fr>
This commit is contained in:
Thomas Citharel 2021-08-09 14:24:54 +02:00
parent 9243be2448
commit 33bf8334fe
No known key found for this signature in database
GPG Key ID: A061B9DDE0CA0773
2 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
js/src/components/Editor.vue
View File

@ -250,7 +250,9 @@ export default class EditorComponent extends Vue {
Mention.configure(MentionOptions), Mention.configure(MentionOptions),
CustomImage, CustomImage,
Underline, Underline,
Link, Link.configure({
HTMLAttributes: { target: "_blank", rel: "noopener noreferrer ugc" },
}),
CharacterCount.configure({ CharacterCount.configure({
limit: this.maxSize, limit: this.maxSize,
}), }),

5
lib/service/formatter/default_scrubbler.ex
View File

@ -36,6 +36,11 @@ defmodule Mobilizon.Service.Formatter.DefaultScrubbler do
"ugc" "ugc"
]) ])
# Rel attributes are separated by spaces
Meta.allow_tag_with_this_attribute_values(:a, "rel", [
"noopener noreferrer ugc"
])
Meta.allow_tag_with_these_attributes(:a, ["name", "title", "target"]) Meta.allow_tag_with_these_attributes(:a, ["name", "title", "target"])
Meta.allow_tag_with_these_attributes(:abbr, ["title"]) Meta.allow_tag_with_these_attributes(:abbr, ["title"])