fix: secure html module removes target attribute from links (#2012)

037822b9 · Regev Brody · GitHub · ca0708ea · 037822b9
Unverified Commit 037822b9 authored Jun 08, 2020 by Regev Brody Committed by GitHub Jun 07, 2020
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

renderer.js server/modules/rendering/html-security/renderer.js +1 -1

No files found.
--- a/server/modules/rendering/html-security/renderer.js
+++ b/server/modules/rendering/html-security/renderer.js
@@ -7,7 +7,7 @@ module.exports = {
      const window = new JSDOM('').window
      const DOMPurify = createDOMPurify(window)

-      const allowedAttrs = ['v-pre', 'v-slot:tabs', 'v-slot:content']
+      const allowedAttrs = ['v-pre', 'v-slot:tabs', 'v-slot:content', 'target']
      const allowedTags = ['tabset', 'template']

      if (config.allowIFrames) {