You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The sanatizer contains h7 and h8 which are not valid HTML elements. The HTML standard defines the heading elementsh1, h2, h3, h4, h5 and h6.
Notably missing are the HTML5 elements bdi (bidirectional), progress and meter. Perhaps even output.
The sanitizer allows the attribute color, which I believe is only used in HTML4 for the font element (which is removed from HTML5). So it would make sense to either add the legacy font element to the allowed elements list or remove the color attribute from the allowed attributes list. The color attribute is not a global attribute.
The allowed HTML elements contains img but video and audio are absent.
The text was updated successfully, but these errors were encountered:
https://github.com/jch/html-pipeline/blob/master/lib/html/pipeline/sanitization_filter.rb#L44-L77
The sanatizer contains
h7
andh8
which are not valid HTML elements. The HTML standard defines the heading elementsh1
,h2
,h3
,h4
,h5
andh6
.Notably missing are the HTML5 elements
bdi
(bidirectional),progress
andmeter
. Perhaps evenoutput
.The sanitizer allows the attribute
color
, which I believe is only used in HTML4 for thefont
element (which is removed from HTML5). So it would make sense to either add the legacyfont
element to the allowed elements list or remove thecolor
attribute from the allowed attributes list. Thecolor
attribute is not a global attribute.The allowed HTML elements contains
img
butvideo
andaudio
are absent.The text was updated successfully, but these errors were encountered: