mirror of
https://github.com/redmine/redmine.git
synced 2026-05-06 07:37:03 +02:00
Allow select custom CSS properties (#37237).
Patch by Jens Krämer. git-svn-id: https://svn.redmine.org/redmine/trunk@21850 e93f8b46-1217-0410-a6f0-8f06a7374b81
This commit is contained in:
@@ -93,6 +93,10 @@ if Object.const_defined?(:CommonMarker)
|
||||
# samples taken from the Sanitize test suite
|
||||
# rubocop:disable Layout/LineLength
|
||||
STRINGS = [
|
||||
[
|
||||
'<span style="color: #333; background: url(\'https://example.com/evil.svg\')">hello</span>"',
|
||||
'<span style="color: #333; ">hello</span>"'
|
||||
],
|
||||
[
|
||||
'<b>Lo<!-- comment -->rem</b> <a href="pants" title="foo" style="text-decoration: underline;">ipsum</a> <a href="http://foo.com/"><strong>dolor</strong></a> sit<br/>amet <style>.foo { color: #fff; }</style> <script>alert("hello world");</script>',
|
||||
'<b>Lorem</b> <a href="pants" title="foo">ipsum</a> <a href="http://foo.com/"><strong>dolor</strong></a> sit<br>amet .foo { color: #fff; } '
|
||||
|
||||
Reference in New Issue
Block a user