From ba0def3a380be963e5fc96d050bd3ce590d15df8 Mon Sep 17 00:00:00 2001 From: Liam DeBeasi Date: Tue, 14 May 2019 11:28:31 -0400 Subject: [PATCH] bug(security): allow name and slot attributes when sanitizing (#18246) * allow name attribute * also add slot --- core/src/utils/sanitization/index.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/core/src/utils/sanitization/index.ts b/core/src/utils/sanitization/index.ts index 3019250f0d..1486a682d9 100644 --- a/core/src/utils/sanitization/index.ts +++ b/core/src/utils/sanitization/index.ts @@ -122,5 +122,5 @@ const getElementChildren = (element: any) => { return (element.children != null) ? element.children : element.childNodes; }; -const allowedAttributes = ['class', 'id', 'href', 'src']; +const allowedAttributes = ['class', 'id', 'href', 'src', 'name', 'slot']; const blockedTags = ['script', 'style', 'iframe', 'meta', 'link', 'object', 'embed'];