update xss whitelist

vnotex · Jul 18, 2024 · 05078a7 · 05078a7
1 parent 84d396f
commit 05078a7
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/src/core/mainconfig.cpp b/src/core/mainconfig.cpp
@@ -119,5 +119,4 @@ QString MainConfig::getVersion(const QJsonObject &p_jobj)
 void MainConfig::doVersionSpecificOverride()
 {
     // In a new version, we may want to change one value by force.
-    m_editorConfig->getMarkdownEditorConfig().m_protectFromXss = true;
 }
diff --git a/src/data/extra/web/js/markdownit.js b/src/data/extra/web/js/markdownit.js
@@ -215,6 +215,11 @@ class MarkdownIt extends VxWorker {
                                       whiteList: {
                                           input: ["class", "disabled", "type", "checked"],
                                           mark: ["class"],
+                                          font: ["color", "class"],
+                                          sub: ["class"],
+                                          sup: ["class"],
+                                          details: ["class"],
+                                          summary: ["class"],
                                       }
                                   });
                               });