codidact / qpixel

Q&A-based community knowledge-sharing software
https://codidact.com
GNU Affero General Public License v3.0
385 stars 69 forks source link

Fix DOMPurify #1173

Closed MoshiKoi closed 1 year ago

MoshiKoi commented 1 year ago

Resolves #724

According to the documentation, USE_PROFILES overrides ALLOWED_TAGS and ALLOWED_ATTR and should not be used together. Basically, we weren't actually using the client sanitizer at all. This should fix basically all the preview issues.