ui: add td.bgcolor to whitelist

3 years ago · 859f27fed1
parent 6dfeede6d6
commit 859f27fed1
1 changed files with 1 additions and 1 deletions
--- a/packages/ui-default/backendlib/markdown-it-xss.js
+++ b/packages/ui-default/backendlib/markdown-it-xss.js
@ -54,7 +54,7 @@ const xss = new Xss.FilterXSS({
        strong: [],
        table: ['width', 'border', 'align', 'valign'],
        tbody: ['align', 'valign'],
-        td: ['width', 'rowspan', 'colspan', 'align', 'valign'],
+        td: ['width', 'rowspan', 'colspan', 'align', 'valign', 'bgcolor'],
        tfoot: ['align', 'valign'],
        th: ['width', 'rowspan', 'colspan', 'align', 'valign'],
        thead: ['align', 'valign'],