fix: exclude non-class attributes from markdown rendering in editor preview (#1251)

115472a3 · Hinaloe · Nicolas Giard · 46630e16 · 115472a3
Commit 115472a3 authored Nov 23, 2019 by Hinaloe Committed by Nicolas Giard Nov 22, 2019
Show whitespace changes
Inline Side-by-side

Showing with 3 additions and 1 deletion

editor-markdown.vue client/components/editor/editor-markdown.vue +3 -1

No files found.
--- a/client/components/editor/editor-markdown.vue
+++ b/client/components/editor/editor-markdown.vue
@@ -233,7 +233,9 @@ const md = new MarkdownIt({
    return `<pre class="line-numbers"><code class="language-${lang}">${str}</code></pre>`
  }
 })
-  .use(mdAttrs)
+  .use(mdAttrs, {
+    allowedAttributes: ['id', 'class', 'target']
+  })
  .use(mdEmoji)
  .use(mdTaskLists, {label: true, labelAfter: true})
  .use(mdExpandTabs)