fix: whitelist task list checkboxes

5 years ago · bacbe4f543
1 changed files with 2 additions and 0 deletions
--- a/server/modules/rendering/html-security/renderer.js
+++ b/server/modules/rendering/html-security/renderer.js
@ -21,7 +21,9 @@ module.exports = {
          h5: ['class', 'id', 'style'],
          h6: ['class', 'id', 'style'],
          img: ['alt', 'class', 'draggable', 'height', 'src', 'style', 'width'],
+          input: ['class', 'disabled', 'type', 'checked', 'id'],
          kbd: ['class'],
+          label: ['class', 'id', 'for'],
          li: ['class', 'style'],
          mark: ['class', 'style'],
          ol: ['class', 'style'],