From 8709bce17445e8d6e034cfe3f4b66dfa73b0dd88 Mon Sep 17 00:00:00 2001 From: "Cathy J. Fitzpatrick" Date: Wed, 22 May 2013 02:16:23 -0500 Subject: [PATCH] Add to the HTML whitelist --- js/battledata.js | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) diff --git a/js/battledata.js b/js/battledata.js index 03daec0f5..7eb6fc987 100644 --- a/js/battledata.js +++ b/js/battledata.js @@ -380,6 +380,26 @@ var Tools = { }, sanitizeHTML: (function() { + // Add to the whitelist. + // See https://developer.mozilla.org/en-US/docs/Web/HTML/Element/marquee + // for the list of attributes. + $.extend(html4.ELEMENTS, { + 'marquee': 0 + }); + $.extend(html4.ATTRIBS, { + 'marquee::behavior': 0, + 'marquee::bgcolor': 0, + 'marquee::direction': 0, + 'marquee::height': 0, + 'marquee::hspace': 0, + 'marquee::loop': 0, + 'marquee::scrollamount': 0, + 'marquee::scrolldelay': 0, + 'marquee::truespeed': 0, + 'marquee::vspace': 0, + 'marquee::width': 0 + }); + var uriRewriter = function(uri) { return uri; };