marcel/mermaid
1
0
Fork 0
mirror of https://github.com/mermaid-js/mermaid.git synced 2025-09-18 06:49:47 +02:00
Code Issues Packages Projects Releases Wiki Activity

Retain attribute dominant-baseline in DOMpurify sanitization

Browse Source
This commit is contained in:
ashishj
2022-04-21 22:02:11 +02:00
parent a6299d8334
commit b472fb4f73
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/mermaidAPI.js
View File

@@ -545,7 +545,10 @@ const render = function (id, _txt, cb, container) {
</iframe>`;
} else {
if (cnf.securityLevel !== 'loose') {
svgCode = DOMPurify.sanitize(svgCode, { ADD_TAGS: ['foreignobject'] });
svgCode = DOMPurify.sanitize(svgCode, {
ADD_TAGS: ['foreignobject'],
ADD_ATTR: ['dominant-baseline'],
});
}
}