feat: Allow caption and summary on table element in HTML sanitizer - E…

…XO-65716 - Meeds-io/MIPs#71 (#526) Allow caption and summary on table element in HTML sanitizer
Meeds-io · Sep 25, 2023 · 8d40393 · 8d40393
1 parent 4ff35b7
commit 8d40393
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/commons-component-common/src/main/java/org/exoplatform/commons/utils/HTMLSanitizer.java b/commons-component-common/src/main/java/org/exoplatform/commons/utils/HTMLSanitizer.java
@@ -184,6 +184,8 @@ abstract public class HTMLSanitizer {
                                                                                                                                 .allowAttributes("noresize")
                                                                                                                                 .matching(Pattern.compile("(?i)noresize"))
                                                                                                                                 .onElements("table")
+                                                                                                                                .allowAttributes("summary")
+                                                                                                                                .onElements("table")
                                                                                                                                 .allowAttributes("background")
                                                                                                                                 .matching(ONSITE_URL)
                                                                                                                                 .onElements("td",
@@ -346,6 +348,7 @@ abstract public class HTMLSanitizer {
                                                                                                                                 .globally()
                                                                                                                                 .allowAttributes("v-identity-popover")
                                                                                                                                 .globally()
+                                                                                                                                .allowElements("caption")
                                                                                                                                 .toFactory();
 
   /**