From 999ff914afbcf2a27d8c7da76de3afbd2f2e559d Mon Sep 17 00:00:00 2001 From: Sebastian Qvarfordt Date: Tue, 22 Sep 2020 14:22:52 +0200 Subject: [PATCH] TechDocs: Enable allowVulnerableTags in sanitize-html (#2554) * enable allowVulnerableTags in sanitize-html * Fixed lint issue * Removed style tag from allowed list. Seems to work fine. * Added tests to make sure we keep link tags and remove style tags --- .../transformers/sanitizeDOM/index.test.ts | 38 +++++++++++++++++++ .../reader/transformers/sanitizeDOM/tags.ts | 2 - 2 files changed, 38 insertions(+), 2 deletions(-) diff --git a/plugins/techdocs/src/reader/transformers/sanitizeDOM/index.test.ts b/plugins/techdocs/src/reader/transformers/sanitizeDOM/index.test.ts index 9754437c1a..691984ecab 100644 --- a/plugins/techdocs/src/reader/transformers/sanitizeDOM/index.test.ts +++ b/plugins/techdocs/src/reader/transformers/sanitizeDOM/index.test.ts @@ -62,4 +62,42 @@ describe('sanitizeDOM', () => { shadowDom.querySelector('#test-malicious-link')?.hasAttribute('onclick'), ).toBeFalsy(); }); + + it('removes style tags', () => { + const html = ` + + +