Merge pull request #2342 from daiyam/bug-1992

fixing inline html
2025-12-13 01:36:22 +00:00 · 2018-11-06 15:45:41 +09:00
parent 106caf2b3e ae9e83cf66
commit efa00728d6
6 changed files with 110 additions and 3 deletions
--- a/browser/lib/markdown.js
+++ b/browser/lib/markdown.js
@@ -106,7 +106,11 @@ class Markdown {
          'iframe': ['src', 'width', 'height', 'frameborder', 'allowfullscreen'],
          'input': ['type', 'id', 'checked']
        },
-        allowedIframeHostnames: ['www.youtube.com']
+        allowedIframeHostnames: ['www.youtube.com'],
+        selfClosing: [ 'img', 'br', 'hr', 'input' ],
+        allowedSchemes: [ 'http', 'https', 'ftp', 'mailto' ],
+        allowedSchemesAppliedToAttributes: [ 'href', 'src', 'cite' ],
+        allowProtocolRelative: true
      })
    }