Only transform <font>

2017-01-11 16:41:05 +00:00 · 2017-01-11 16:41:05 +00:00 · 32185befc0
commit 32185befc0
parent 8e3f2eb858
1 changed files with 1 additions and 1 deletions
--- a/src/HtmlUtils.js
+++ b/src/HtmlUtils.js
@ -141,7 +141,7 @@ var sanitizeHtmlParams = {
            attribs.rel = 'noopener'; // https://mathiasbynens.github.io/rel-noopener/
            return { tagName: tagName, attribs : attribs };
        },
-        '*': function(tagName, attribs) {
+        'font': function(tagName, attribs) {
            // Only allow certain CSS attributes to avoid XSS attacks
            // Sanitizing values to avoid `url(...)` and `expression(...)` attacks
            if (!attribs.style) {