diff options
| author | John Olheiser <42128690+jolheiser@users.noreply.github.com> | 2019-12-03 13:02:41 -0600 |
|---|---|---|
| committer | techknowlogick <techknowlogick@gitea.io> | 2019-12-03 14:02:41 -0500 |
| commit | 9a33adcdd322dfcb535d57c68c2365b0dc2b3e6c (patch) | |
| tree | c48da401663e6279fc77abe5c8b200d5a0710653 /modules | |
| parent | bdbdd6608f38819786c8447f6aa6fd45694ce37a (diff) | |
| download | gitea-9a33adcdd322dfcb535d57c68c2365b0dc2b3e6c.tar.gz gitea-9a33adcdd322dfcb535d57c68c2365b0dc2b3e6c.zip | |
Allow kbd tags (#9245)
* Allow kbd tags
Signed-off-by: jolheiser <john.olheiser@gmail.com>
* Add test
Signed-off-by: jolheiser <john.olheiser@gmail.com>
Diffstat (limited to 'modules')
| -rw-r--r-- | modules/markup/sanitizer.go | 3 | ||||
| -rw-r--r-- | modules/markup/sanitizer_test.go | 3 |
2 files changed, 6 insertions, 0 deletions
diff --git a/modules/markup/sanitizer.go b/modules/markup/sanitizer.go index 45d363b37e..0ebb3ff88b 100644 --- a/modules/markup/sanitizer.go +++ b/modules/markup/sanitizer.go @@ -47,6 +47,9 @@ func ReplaceSanitizer() { // Allow keyword markup sanitizer.policy.AllowAttrs("class").Matching(regexp.MustCompile(`^` + keywordClass + `$`)).OnElements("span") + + // Allow <kbd> tags for keyboard shortcut styling + sanitizer.policy.AllowElements("kbd") } // Sanitize takes a string that contains a HTML fragment or document and applies policy whitelist. diff --git a/modules/markup/sanitizer_test.go b/modules/markup/sanitizer_test.go index 211201d201..be7bdd20e7 100644 --- a/modules/markup/sanitizer_test.go +++ b/modules/markup/sanitizer_test.go @@ -35,6 +35,9 @@ func Test_Sanitizer(t *testing.T) { <code class="language-lol ui container input massive basic segment">Hello there! Something has gone wrong, we are working on it.</code> <code class="language-lol ui container input huge basic segment">In the meantime, play a game with us at <a href="http://example.com/">example.com</a>.</code> </code>`, "<code>\n<code>\u00a0</code>\n<img src=\"https://try.gogs.io/img/favicon.png\" width=\"200\" height=\"200\">\n<code>Hello there! Something has gone wrong, we are working on it.</code>\n<code>In the meantime, play a game with us at\u00a0<a href=\"http://example.com/\" rel=\"nofollow\">example.com</a>.</code>\n</code>", + + // <kbd> tags + `<kbd>Ctrl + C</kbd>`, `<kbd>Ctrl + C</kbd>`, } for i := 0; i < len(testCases); i += 2 { |