Allow all rel values for event & post links in descriptions

Signed-off-by: Thomas Citharel <tcit@tcit.fr>
2021-08-09 14:24:54 +02:00
parent 9243be2448
commit 33bf8334fe
2 changed files with 8 additions and 1 deletions
--- a/lib/service/formatter/default_scrubbler.ex
+++ b/lib/service/formatter/default_scrubbler.ex
@@ -36,6 +36,11 @@ defmodule Mobilizon.Service.Formatter.DefaultScrubbler do
    "ugc"
  ])

+  # Rel attributes are separated by spaces
+  Meta.allow_tag_with_this_attribute_values(:a, "rel", [
+    "noopener noreferrer ugc"
+  ])
+
  Meta.allow_tag_with_these_attributes(:a, ["name", "title", "target"])

  Meta.allow_tag_with_these_attributes(:abbr, ["title"])