Merge pull request #874 from vitalyavolyn/open-links-new-tab

Preserve target=_blank attribute when purifying (fix #793)
dimdenGD · Jul 13, 2024 · ebf37b5 · ebf37b5
2 parents 860719f + f7e2380
commit ebf37b5
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/scripts/helpers.js b/scripts/helpers.js
@@ -384,7 +384,8 @@ function escapeHTML(unsafe) {
     if(typeof unsafe === 'undefined' || unsafe === null) {
         return '';
     }
-    return DOMPurify.sanitize(String(unsafe));
+
+    return DOMPurify.sanitize(String(unsafe), { ADD_ATTR: ['target'] });
 }
 
 function html(strings, ...values) {