Allow HTML header attributes in sanitizer

2025-03-08 10:35:04 +01:00
parent 88b6e10c88
commit e09a8353d2
1 changed files with 1 additions and 0 deletions
--- a/cmd/backend/markdown.go
+++ b/cmd/backend/markdown.go
@@ -31,6 +31,7 @@ func ConvertToHTML(md string) (string, error) {
 	}

 	p := bluemonday.UGCPolicy()
+	p.AllowAttrs("id").OnElements("h1", "h2", "h3", "h4", "h5", "h6")
 	html := p.Sanitize(buf.String())

 	return html, nil