diff --git a/js/privatebin.js b/js/privatebin.js index 58482b40..7d8ce842 100644 --- a/js/privatebin.js +++ b/js/privatebin.js @@ -812,7 +812,8 @@ jQuery.PrivateBin = (function($) { if (containsHtml) { // only allow tags/attributes we actually use in translations - const sanitizeConfig = Object.assign({}, purifyHtmlConfig, { + const sanitizeConfig = { + ...purifyHtmlConfig, ALLOWED_TAGS: ['a', 'i', 'span', 'kbd'], ALLOWED_ATTR: ['href', 'id'] });