Add crossorigin attribute to <audio>, <video>, <img>, <link> and <scr…

…ipt>
xemlock · Sep 2, 2021 · 5f038b7 · 5f038b7
1 parent 6ab9042
commit 5f038b7
Show file tree

Hide file tree

Showing 5 changed files with 7 additions and 1 deletion.
diff --git a/library/HTMLPurifier/HTML5Config.php b/library/HTMLPurifier/HTML5Config.php
@@ -2,7 +2,7 @@
 
 class HTMLPurifier_HTML5Config extends HTMLPurifier_Config
 {
-    const REVISION = 2021083101;
+    const REVISION = 2021090201;
 
     /**
      * @param  string|array|HTMLPurifier_Config $config

diff --git a/library/HTMLPurifier/HTMLModule/HTML5/Link.php b/library/HTMLPurifier/HTMLModule/HTML5/Link.php
@@ -29,6 +29,7 @@ public function setup($config)
             'rel*'  => new HTMLPurifier_AttrDef_HTML5_LinkRel(),
             'href*' => new HTMLPurifier_AttrDef_URI(true),
             'type'  => 'Text',
+            'crossorigin' => 'Enum#anonymous',
         ));
         $this->addElementToContentSet('link', 'Inline');
     }

diff --git a/library/HTMLPurifier/HTMLModule/HTML5/Media.php b/library/HTMLPurifier/HTMLModule/HTML5/Media.php
@@ -28,6 +28,7 @@ public function setup($config)
             'preload'  => 'Enum#auto,metadata,none',
             'src'      => new HTMLPurifier_AttrDef_URI(true),
             'width'    => 'Length',
+            'crossorigin' => 'Enum#anonymous',
         ));
         $this->addElementToContentSet('video', 'Inline');
 
@@ -36,6 +37,7 @@ public function setup($config)
             'controls' => 'Bool#controls',
             'preload'  => 'Enum#auto,metadata,none',
             'src'      => new HTMLPurifier_AttrDef_URI(true),
+            'crossorigin' => 'Enum#anonymous',
         ));
         $this->addElementToContentSet('audio', 'Inline');
 
@@ -67,6 +69,7 @@ public function setup($config)
             'srcset' => 'Text',
             'sizes'  => 'Text',
             'loading' => 'Enum#lazy,eager',
+            'crossorigin' => 'Enum#anonymous',
         );
     }
 }
diff --git a/library/HTMLPurifier/HTMLModule/HTML5/SafeScripting.php b/library/HTMLPurifier/HTMLModule/HTML5/SafeScripting.php
@@ -38,6 +38,7 @@ public function setup($config)
                 'async' => new HTMLPurifier_AttrDef_HTML_Bool2(),
                 'defer' => new HTMLPurifier_AttrDef_HTML_Bool2(),
                 'charset' => 'Enum#utf-8',
+                'crossorigin' => 'Enum#anonymous',
             )
         );
 

diff --git a/library/HTMLPurifier/HTMLModule/HTML5/Scripting.php b/library/HTMLPurifier/HTMLModule/HTML5/Scripting.php
@@ -41,6 +41,7 @@ public function setup($config)
             // If present, its value must be an ASCII case-insensitive match for "utf-8"
             // Deprecated: https://html.spec.whatwg.org/multipage/scripting.html#the-script-element
             'charset' => 'Enum#utf-8',
+            'crossorigin' => 'Enum#anonymous',
         ));
         $this->addElementToContentSet('script', 'Inline');