update xss whitelist

vnotex · Jul 18, 2024 · 78de724 · 78de724
1 parent 05078a7
commit 78de724
Showing 1 changed file with 9 additions and 7 deletions.
diff --git a/src/data/extra/web/js/markdownit.js b/src/data/extra/web/js/markdownit.js
@@ -213,13 +213,15 @@ class MarkdownIt extends VxWorker {
                               () => {
                                   this.mdit.use(window.markdownItXSS, {
                                       whiteList: {
-                                          input: ["class", "disabled", "type", "checked"],
-                                          mark: ["class"],
-                                          font: ["color", "class"],
-                                          sub: ["class"],
-                                          sup: ["class"],
-                                          details: ["class"],
-                                          summary: ["class"],
+                                          input: ["style", "class", "disabled", "type", "checked"],
+                                          mark: ["style", "class"],
+                                          font: ["style", "color", "class"],
+                                          sub: ["style", "class"],
+                                          sup: ["style", "class"],
+                                          details: ["style", "class"],
+                                          summary: ["style", "class"],
+                                          ins: ["style", "class"],
+                                          span: ["style", "class"],
                                       }
                                   });
                               });