N°2847 - Add data-[role|object-class|object-id] attributes to the HTML sanitizer white list for anchors

This commit is contained in:
Molkobain
2020-12-09 22:23:37 +01:00
parent bc3c46b566
commit c22f019ea1

View File

@@ -162,7 +162,7 @@ class HTMLDOMSanitizer extends HTMLSanitizer
protected static $aTagsWhiteList = array(
'html' => array(),
'body' => array(),
'a' => array('href', 'name', 'style', 'target', 'title'),
'a' => array('href', 'name', 'style', 'target', 'title', 'data-role', 'data-object-class', 'data-object-id'),
'p' => array('style'),
'blockquote' => array('style'),
'br' => array(),