doc-utils/markdown2html
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

whitelist rdfa tags/attrs in html sanitizer

Browse Source
This commit is contained in:
James Brumond 2023-05-12 14:59:45 -07:00
parent fb52d31090
commit 8599460702
Signed by: james
GPG Key ID: E8F2FC44BAA3357A
2 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/breadcrumb-nav.ts
View File

@ -41,10 +41,10 @@ export function breadcrumb_nav_ext(renderer: marked.Renderer, opts: MarkdownOpti
}, },
renderer(token: BreadcrumbNavToken) { renderer(token: BreadcrumbNavToken) {
return `<nav aria-label="breadcrumbs" ${token.attrs.html_attrs.join(' ')}>\n` return `<nav aria-label="breadcrumbs" ${token.attrs.html_attrs.join(' ')}>\n`
+ `\t<ol vocab="https://schema.org/" typeof="BreadcrumbList">\n` + `\t<ol typeof="https://schema.org/BreadcrumbList">\n`
+ '\t\t' + '\t\t'
+ token.items.map((tokens, index) =>{ + token.items.map((tokens, index) =>{
let item = '<li property="itemListElement" typeof="ListItem">\n'; let item = '<li property="itemListElement" typeof="https://schema.org/ListItem">\n';
if (index) { if (index) {
item += '\t\t\t<span class="separator" aria-hidden="true">/</span>\n'; item += '\t\t\t<span class="separator" aria-hidden="true">/</span>\n';

5
src/html-sanitize.ts
View File

@ -8,6 +8,9 @@ export function sanitize_html(html: string, custom_elements?: CustomElementHandl
const { window } = new JSDOM(''); const { window } = new JSDOM('');
const dom_purify = createDOMPurify(window as any as Window); const dom_purify = createDOMPurify(window as any as Window);
return dom_purify.sanitize(html, { return dom_purify.sanitize(html, {
CUSTOM_ELEMENT_HANDLING: custom_elements CUSTOM_ELEMENT_HANDLING: custom_elements,
ALLOWED_TAGS: ['meta'],
ALLOWED_ATTR: ['typeof', 'property', 'content'],
ADD_URI_SAFE_ATTR: ['typeof']
}); });
} }