search

bevacqua / insane

:pouting_cat: Lean and configurable whitelist-oriented HTML sanitizer
https://ponyfoo.com
MIT License
449 stars 22 forks source link

Add "u" to list of whitelisted tags. #4

Closed markstos closed 7 years ago

markstos commented 7 years ago

The "u" tag is sometimes used for underlying and is not dangerous according to Mozilla docs: https://developer.mozilla.org/en-US/docs/Web/HTML/Element/u

Normally it's recommended to use another tag instead of "u", like using with CSS to style text with an underline.

However, this module does not allow the "style" element because CSS can be dangerous, making the older "u" tag an interesting "safe" alternative in this context.

bevacqua commented 7 years ago

Thanks for your contributions! :tada: