diff --git a/packages/ui-default/backendlib/markdown-it-xss.ts b/packages/ui-default/backendlib/markdown-it-xss.ts index f618a3ced..a89dca661 100644 --- a/packages/ui-default/backendlib/markdown-it-xss.ts +++ b/packages/ui-default/backendlib/markdown-it-xss.ts @@ -1,12 +1,13 @@ import * as Xss from 'xss'; const stack = []; +const voidTags = ['br', 'hr', 'input', 'img', 'link', 'source', 'col', 'area', 'base', 'meta', 'embed', 'param', 'track', 'wbr']; const tagCheck = new Xss.FilterXSS({ css: false, whiteList: {}, onIgnoreTag(tag, html, options) { - if (html.endsWith('/>')) return html; + if (html.endsWith('/>') || voidTags.includes(tag)) return html; if (!options.isClosing) { stack.push(tag); return html; diff --git a/packages/ui-default/package.json b/packages/ui-default/package.json index 06d5be3f4..056981b29 100644 --- a/packages/ui-default/package.json +++ b/packages/ui-default/package.json @@ -1,6 +1,6 @@ { "name": "@hydrooj/ui-default", - "version": "4.31.12", + "version": "4.31.13", "author": "undefined ", "license": "AGPL-3.0", "main": "hydro.js",