From 8599460702b09ec5e456a6af37bfeba757858780 Mon Sep 17 00:00:00 2001
From: James Brumond <james@jbrumond.me>
Date: Fri, 12 May 2023 14:59:45 -0700
Subject: [PATCH] whitelist rdfa tags/attrs in html sanitizer

---
 src/breadcrumb-nav.ts | 4 ++--
 src/html-sanitize.ts  | 5 ++++-
 2 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/src/breadcrumb-nav.ts b/src/breadcrumb-nav.ts
index 671ca05..de52090 100644
--- a/src/breadcrumb-nav.ts
+++ b/src/breadcrumb-nav.ts
@@ -41,10 +41,10 @@ export function breadcrumb_nav_ext(renderer: marked.Renderer, opts: MarkdownOpti
 		},
 		renderer(token: BreadcrumbNavToken) {
 			return `<nav aria-label="breadcrumbs" ${token.attrs.html_attrs.join(' ')}>\n`
-				+ `\t<ol vocab="https://schema.org/" typeof="BreadcrumbList">\n`
+				+ `\t<ol typeof="https://schema.org/BreadcrumbList">\n`
 				+ '\t\t'
 					+ token.items.map((tokens, index) =>{ 
-						let item = '<li property="itemListElement" typeof="ListItem">\n';
+						let item = '<li property="itemListElement" typeof="https://schema.org/ListItem">\n';
 
 						if (index) {
 							item += '\t\t\t<span class="separator" aria-hidden="true">/</span>\n';
diff --git a/src/html-sanitize.ts b/src/html-sanitize.ts
index 233bdb0..a825d01 100644
--- a/src/html-sanitize.ts
+++ b/src/html-sanitize.ts
@@ -8,6 +8,9 @@ export function sanitize_html(html: string, custom_elements?: CustomElementHandl
 	const { window } = new JSDOM('');
 	const dom_purify = createDOMPurify(window as any as Window);
 	return dom_purify.sanitize(html, {
-		CUSTOM_ELEMENT_HANDLING: custom_elements
+		CUSTOM_ELEMENT_HANDLING: custom_elements,
+		ALLOWED_TAGS: ['meta'],
+		ALLOWED_ATTR: ['typeof', 'property', 'content'],
+		ADD_URI_SAFE_ATTR: ['typeof']
 	});
 }