mirror of
https://github.com/Part-DB/Part-DB-server.git
synced 2025-06-21 09:35:49 +02:00
Allow any HTML in Label generator (which makes it possible to fully customize the labels)
This commit is contained in:
parent
d58159f181
commit
767bf763b8
1 changed files with 21 additions and 0 deletions
|
@ -207,6 +207,27 @@ Editor.defaultConfig = {
|
|||
],
|
||||
supportAllValues: true
|
||||
},
|
||||
// Allow all HTML features for our labels
|
||||
htmlSupport: {
|
||||
allow: [
|
||||
{
|
||||
name: /.*/,
|
||||
attributes: true,
|
||||
classes: true,
|
||||
styles: true
|
||||
}
|
||||
],
|
||||
disallow: [
|
||||
//Some rudimentary protection against XSS, even if it is not really needed as this is only parsed by DOMHTML which does not support any kind of script execution.
|
||||
{
|
||||
name: /^(head|body|html|script)$/i,
|
||||
},
|
||||
{
|
||||
name: /.*/,
|
||||
attributes: /^on.*/i
|
||||
}
|
||||
]
|
||||
},
|
||||
image: {
|
||||
toolbar: [
|
||||
'imageTextAlternative',
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue