From 8c314fe461d681efafc585ef840fc5d89d20b3f2 Mon Sep 17 00:00:00 2001
From: Peter Jaszkowiak <p.jaszkow@gmail.com>
Date: Sat, 7 Dec 2019 12:37:10 -0700
Subject: [PATCH] Support allowing classes

Otherwise `<input class="form-control">` can't work
---
 src/posts/parse.js | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/src/posts/parse.js b/src/posts/parse.js
index 3ab61b3d57..6a7586fbc6 100644
--- a/src/posts/parse.js
+++ b/src/posts/parse.js
@@ -33,6 +33,9 @@ let sanitizeConfig = {
 		'draggable', 'dropzone', 'hidden', 'id', 'lang', 'spellcheck', 'style',
 		'tabindex', 'title', 'translate', 'aria-expanded', 'data-*',
 	],
+	allowedClasses: {
+		...sanitize.defaults.allowedClasses,
+	},
 };
 
 module.exports = function (Posts) {
@@ -105,7 +108,9 @@ module.exports = function (Posts) {
 
 	Posts.sanitize = function (content) {
 		return sanitize(content, {
-			allowedTags: sanitizeConfig.allowedTags, allowedAttributes: sanitizeConfig.allowedAttributes,
+			allowedTags: sanitizeConfig.allowedTags,
+			allowedAttributes: sanitizeConfig.allowedAttributes,
+			allowedClasses: sanitizeConfig.allowedClasses,
 		});
 	};