aljaz/njump
1
0
Fork 0
mirror of https://github.com/aljazceru/njump.git synced 2025-12-18 06:44:22 +01:00
Code Issues Packages Projects Releases Wiki Activity

Prevent markdown from adding rel=nofollow

Browse Source
This commit is contained in:
Daniele Tonon
2023-06-06 12:22:07 +02:00
parent 9a7c47a2aa
commit 45e6a20085
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
utils.go
View File

@@ -282,6 +282,7 @@ func replaceURLsWithTags(line string) string {
func sanitizeXSS(html string) string {
p := bluemonday.UGCPolicy()
p.AllowStyling()
p.RequireNoFollowOnLinks(false)
p.AllowElements("video", "source", "iframe")
p.AllowAttrs("controls", "width").OnElements("video")
p.AllowAttrs("src", "width").OnElements("source")