feat: katex in markdown preview + xss fix for svg

2020-03-06 14:31:05 -05:00
parent 4398573645
commit 830f51664c
3 changed files with 175 additions and 2 deletions
--- a/server/modules/rendering/html-security/renderer.js
+++ b/server/modules/rendering/html-security/renderer.js
@@ -29,10 +29,10 @@ module.exports = {
          path: ['d', 'style'],
          pre: ['class', 'style'],
          section: ['class', 'style'],
-          span: ['class', 'style'],
+          span: ['class', 'style', 'aria-hidden'],
          strong: ['class', 'style'],
          summary: ['class', 'style'],
-          svg: ['width', 'height', 'viewBox', 'preserveAspectRatio', 'style'],
+          svg: ['width', 'height', 'viewbox', 'preserveaspectratio', 'style'],
          table: ['border', 'class', 'id', 'style', 'width'],
          tbody: ['class', 'style'],
          td: ['align', 'class', 'colspan', 'rowspan', 'style', 'valign'],