fix: exclude non-class attributes from markdown rendering

requarks · Nov 17, 2019 · fb0c64a · fb0c64a
1 parent d6f2176
commit fb0c64a
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/server/modules/rendering/markdown-core/renderer.js b/server/modules/rendering/markdown-core/renderer.js
@@ -30,7 +30,9 @@ module.exports = {
       }
     })
 
-    mkdown.use(mdAttrs)
+    mkdown.use(mdAttrs, {
+      allowedAttributes: ['id', 'class']
+    })
 
     for (let child of this.children) {
       const renderer = require(`../${_.kebabCase(child.key)}/renderer.js`)