mirror of
https://github.com/PrivateBin/PrivateBin.git
synced 2026-03-05 13:30:32 -05:00
refactor: use modern spread syntax for combining object
Given it's 2026 this really should be supported by all browsers now: https://caniuse.com/mdn-javascript_operators_spread,mdn-javascript_operators_spread_spread_in_arrays,mdn-javascript_operators_spread_spread_in_function_calls,mdn-javascript_operators_spread_spread_in_object_literals
This commit is contained in:
@@ -812,7 +812,8 @@ jQuery.PrivateBin = (function($) {
|
||||
|
||||
if (containsHtml) {
|
||||
// only allow tags/attributes we actually use in translations
|
||||
const sanitizeConfig = Object.assign({}, purifyHtmlConfig, {
|
||||
const sanitizeConfig = {
|
||||
...purifyHtmlConfig,
|
||||
ALLOWED_TAGS: ['a', 'i', 'span', 'kbd'],
|
||||
ALLOWED_ATTR: ['href', 'id']
|
||||
});
|
||||
|
||||
Reference in New Issue
Block a user