Skip to content
Prev Previous commit
Next Next commit
Manually whitelist tags
Signed-off-by: Lukas Reschke <[email protected]>
  • Loading branch information
LukasReschke authored and nickvergessen committed Jan 17, 2017
commit a30d170aca2e13a11e8530aae736b728fe813895
17 changes: 16 additions & 1 deletion settings/js/apps.js
Original file line number Diff line number Diff line change
Expand Up @@ -189,7 +189,22 @@ OC.Settings.Apps = OC.Settings.Apps || {
}

// Parse markdown in app description
app.description = DOMPurify.sanitize(marked(app.description.trim(), OC.Settings.Apps.markedOptions));
app.description = DOMPurify.sanitize(
marked(app.description.trim(), OC.Settings.Apps.markedOptions),
{
SAFE_FOR_JQUERY: true,
ALLOWED_TAGS: [
'strong',
'p',
'a',
'ul',
'li',
'em',
's',
'blockquote'
]
}
);

var html = template(app);
if (selector) {
Expand Down