瀏覽代碼

fix: exclude non-class attributes from markdown rendering

NGPixel 5 年之前
父節點
當前提交
fb0c64a07e
共有 1 個文件被更改,包括 3 次插入1 次删除
  1. 3 1
      server/modules/rendering/markdown-core/renderer.js

+ 3 - 1
server/modules/rendering/markdown-core/renderer.js

@@ -30,7 +30,9 @@ module.exports = {
       }
     })
 
-    mkdown.use(mdAttrs)
+    mkdown.use(mdAttrs, {
+      allowedAttributes: ['id', 'class']
+    })
 
     for (let child of this.children) {
       const renderer = require(`../${_.kebabCase(child.key)}/renderer.js`)