fix: secure html module removes target attribute from links (#2012)

5 years ago · 037822b994
parent ca0708ea75
commit 037822b994
1 changed files with 1 additions and 1 deletions
--- a/server/modules/rendering/html-security/renderer.js
+++ b/server/modules/rendering/html-security/renderer.js
@ -7,7 +7,7 @@ module.exports = {
      const window = new JSDOM('').window
      const DOMPurify = createDOMPurify(window)

-      const allowedAttrs = ['v-pre', 'v-slot:tabs', 'v-slot:content']
+      const allowedAttrs = ['v-pre', 'v-slot:tabs', 'v-slot:content', 'target']
      const allowedTags = ['tabset', 'template']

      if (config.allowIFrames) {