Permit del, ins, and s elements in sanitized HTML.

toddsundsted · Nov 11, 2024 · d3ad170 · d3ad170
1 parent 3b6e840
commit d3ad170
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/spec/framework/util_spec.cr b/spec/framework/util_spec.cr
@@ -51,7 +51,7 @@ Spectator.describe Ktistec::Util do
     end
 
     it "preserves supported tags" do
-      content = "<p>this is <span><strong>some</strong> <em>text</em></span></p>"
+      content = "<p>this is <span><strong>some</strong> <em>text</em> <sup>test</sup> <sub>test</sub> <del>test</del> <ins>test</ins> <s>test</s></span></p>"
       expect(described_class.sanitize(content)).to eq(content)
     end
 

diff --git a/src/framework/util.cr b/src/framework/util.cr
@@ -78,7 +78,7 @@ module Ktistec
       "ul", "ol", "li",
       "dl", "dt", "dd",
       "div", "span", "figure", "figcaption",
-      "strong", "em", "sup", "sub",
+      "strong", "em", "sup", "sub", "del", "ins", "s",
       "blockquote",
       "code", "pre",
       "img",