-
Limit `style` attribute on `th` and `td` elements to specific properties · c2a98b03Robert Speicher authored
Previously we whitelisted the entire `style` attribute on `th` and `td` elements, in order to allow Markdown table alignment to work. But this opened us up to a potential exploit by allowing a malicious user to define properties besides `text-align` in the attribute. We now remove everything except `text-align: (center|left|right)`.
c2a98b03
×