fix: exclude non-class attributes from markdown rendering

2019-11-16 22:19:35 -05:00
parent d6f2176de2
commit fb0c64a07e
1 changed files with 3 additions and 1 deletions
--- a/server/modules/rendering/markdown-core/renderer.js
+++ b/server/modules/rendering/markdown-core/renderer.js
@@ -30,7 +30,9 @@ module.exports = {
      }
    })

-    mkdown.use(mdAttrs)
+    mkdown.use(mdAttrs, {
+      allowedAttributes: ['id', 'class']
+    })

    for (let child of this.children) {
      const renderer = require(`../${_.kebabCase(child.key)}/renderer.js`)