mirror of
https://github.com/Part-DB/Part-DB-server.git
synced 2025-06-21 09:35:49 +02:00
Allow any HTML in Label generator (which makes it possible to fully customize the labels)
This commit is contained in:
parent
d58159f181
commit
767bf763b8
1 changed files with 21 additions and 0 deletions
|
@ -207,6 +207,27 @@ Editor.defaultConfig = {
|
||||||
],
|
],
|
||||||
supportAllValues: true
|
supportAllValues: true
|
||||||
},
|
},
|
||||||
|
// Allow all HTML features for our labels
|
||||||
|
htmlSupport: {
|
||||||
|
allow: [
|
||||||
|
{
|
||||||
|
name: /.*/,
|
||||||
|
attributes: true,
|
||||||
|
classes: true,
|
||||||
|
styles: true
|
||||||
|
}
|
||||||
|
],
|
||||||
|
disallow: [
|
||||||
|
//Some rudimentary protection against XSS, even if it is not really needed as this is only parsed by DOMHTML which does not support any kind of script execution.
|
||||||
|
{
|
||||||
|
name: /^(head|body|html|script)$/i,
|
||||||
|
},
|
||||||
|
{
|
||||||
|
name: /.*/,
|
||||||
|
attributes: /^on.*/i
|
||||||
|
}
|
||||||
|
]
|
||||||
|
},
|
||||||
image: {
|
image: {
|
||||||
toolbar: [
|
toolbar: [
|
||||||
'imageTextAlternative',
|
'imageTextAlternative',
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue