danog/blackfriday
1
0
Fork 0
mirror of https://github.com/danog/blackfriday.git synced 2024-11-30 04:29:13 +01:00
Code Issues Projects Releases Wiki Activity

Add support for a bunch more safe HTML element tags, and bring them into some order.

Browse Source
This commit is contained in:
Martin Probst 2014-05-01 22:08:32 +02:00
parent aeb569ff46
commit 8d2af3a21b
2 changed files with 19 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
inline_test.go
View File

@ -211,6 +211,9 @@ func TestRawHtmlTag(t *testing.T) {
"<!DOCTYPE test>", "<!DOCTYPE test>",
"<p>&lt;!DOCTYPE test&gt;</p>\n", "<p>&lt;!DOCTYPE test&gt;</p>\n",
"<hr>",
"<hr>\n",
} }
doTestsInlineParam(t, tests, 0, HTML_SKIP_STYLE|HTML_SANITIZE_OUTPUT) doTestsInlineParam(t, tests, 0, HTML_SKIP_STYLE|HTML_SANITIZE_OUTPUT)
} }
@ -548,7 +551,7 @@ func TestNofollowLink(t *testing.T) {
func TestHrefTargetBlank(t *testing.T) { func TestHrefTargetBlank(t *testing.T) {
var tests = []string{ var tests = []string{
// internal link // internal link
"[foo](/bar/)\n", "[foo](/bar/)\n",
"<p><a href=\"/bar/\">foo</a></p>\n", "<p><a href=\"/bar/\">foo</a></p>\n",

20
sanitize.go
View File

@ -19,12 +19,22 @@ var (
func init() { func init() {
whitelistTags = toSet([]string{ whitelistTags = toSet([]string{
"a", "b", "blockquote", "br", "caption", "cite", "code", "col", // Headings
"colgroup", "dd", "div", "dl", "dt", "em",
"h1", "h2", "h3", "h4", "h5", "h6", "h1", "h2", "h3", "h4", "h5", "h6",
"i", "img", "li", "ol", "p", "pre", "q", "small", "strike", "strong", // Block elements
"sub", "sup", "table", "tbody", "td", "tfoot", "th", "thead", "tr", "u", "p", "pre", "blockquote", "hr", "div", "header", "article", "aside", "footer",
"ul"}) "section", "main", "mark", "figure", "figcaption",
// Inline elements
"a", "br", "cite", "code", "img",
// Lists
"ol", "ul", "li",
// Tables
"table", "tbody", "td", "tfoot", "th", "thead", "tr", "colgroup", "col", "caption",
// Formatting
"u", "i", "em", "small", "strike", "b", "strong", "sub", "sup", "q",
// Definition lists
"dd", "dl", "dt",
})
whitelistAttrs = map[string]map[string]bool{ whitelistAttrs = map[string]map[string]bool{
"a": toSet([]string{"href", "title", "rel"}), "a": toSet([]string{"href", "title", "rel"}),
"img": toSet([]string{"src", "alt", "title"}), "img": toSet([]string{"src", "alt", "title"}),