1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
|
"use strict";
const HTTP_EQUIV = "http-equiv";
const REFRESH = "refresh";
const isHttpEquiv = ({ attrs }) => {
return attrs && (HTTP_EQUIV in attrs) && attrs[HTTP_EQUIV].toLowerCase() === REFRESH;
};
// Fork: pruned some deprecated tag/attribute combos here.
const DEFAULT_OPTIONS = {
filter: {
a: { href: true, ping: true },
area: { href: true, ping: true },
audio: { src: true },
base: { href: true },
blockquote: { cite: true },
button: { formaction: true },
del: { cite: true },
embed: { src: true },
form: { action: true },
iframe: { src: true },
img: { src: true, srcset: true },
input: { formaction: true, src: true },
ins: { cite: true },
link: { href: true },
meta: { content: isHttpEquiv },
object: { data: true },
q: { cite: true },
script: { src: true },
source: { src: true, srcset: true },
track: { src: true },
// video does not yet have srcset: https://scottjehl.com/posts/using-responsive-video/
video: { poster: true, src: true },
},
};
module.exports = DEFAULT_OPTIONS;
|
