Fix slide might able to add unsafe attribute on section tag which cause XSS [Security Issue]

2016-11-26 22:46:58 +08:00
parent f86a9e0c4b
commit 79d5b2c37f
2 changed files with 5 additions and 1 deletions
--- a/public/js/render.js
+++ b/public/js/render.js
@@ -1,5 +1,6 @@
 // allow some attributes
 var whiteListAttr = ['id', 'class', 'style'];
+window.whiteListAttr = whiteListAttr;
 // allow link starts with '.', '/' and custom protocol with '://'
 var linkRegex = /^([\w|-]+:\/\/)|^([\.|\/])+/;
 // allow data uri, from https://gist.github.com/bgrins/6194623