2019-12-12 04:35:54 +00:00
|
|
|
const xss = require('xss')
|
2018-09-16 04:35:03 +00:00
|
|
|
|
2019-12-12 04:35:54 +00:00
|
|
|
module.exports = {
|
|
|
|
async init(input, config) {
|
|
|
|
if (config.safeHTML) {
|
|
|
|
input = xss(input, {
|
|
|
|
whiteList: {
|
|
|
|
...xss.whiteList,
|
2019-12-19 04:45:19 +00:00
|
|
|
a: ['class', 'id', 'href', 'style', 'target', 'title'],
|
|
|
|
blockquote: ['class', 'id', 'style'],
|
|
|
|
code: ['class', 'style'],
|
|
|
|
div: ['class', 'id', 'style'],
|
|
|
|
em: ['class', 'style'],
|
|
|
|
h1: ['class', 'id', 'style'],
|
|
|
|
h2: ['class', 'id', 'style'],
|
|
|
|
h3: ['class', 'id', 'style'],
|
|
|
|
h4: ['class', 'id', 'style'],
|
|
|
|
h5: ['class', 'id', 'style'],
|
|
|
|
h6: ['class', 'id', 'style'],
|
|
|
|
img: ['alt', 'class', 'draggable', 'height', 'src', 'style', 'width'],
|
|
|
|
li: ['class', 'style'],
|
|
|
|
ol: ['class', 'style'],
|
|
|
|
p: ['class', 'style'],
|
|
|
|
path: ['d', 'style'],
|
|
|
|
pre: ['class', 'style'],
|
|
|
|
span: ['class', 'style'],
|
|
|
|
strong: ['class', 'style'],
|
|
|
|
svg: ['width', 'height', 'viewBox', 'preserveAspectRatio', 'style'],
|
|
|
|
table: ['border', 'class', 'id', 'style', 'width'],
|
|
|
|
tbody: ['class', 'style'],
|
|
|
|
td: ['align', 'class', 'colspan', 'rowspan', 'style', 'valign'],
|
|
|
|
th: ['align', 'class', 'colspan', 'rowspan', 'style', 'valign'],
|
|
|
|
thead: ['class', 'style'],
|
|
|
|
tr: ['class', 'rowspan', 'style', 'align', 'valign'],
|
|
|
|
ul: ['class', 'style']
|
|
|
|
},
|
|
|
|
css: false
|
2019-12-12 04:35:54 +00:00
|
|
|
})
|
|
|
|
}
|
|
|
|
return input
|
2018-09-16 04:35:03 +00:00
|
|
|
}
|
|
|
|
}
|