chore: prevent clickjacking

This commit is contained in:
wonderlandpark 2021-05-13 16:24:08 +09:00
parent a961846c65
commit 518bc344dd

View File

@ -100,6 +100,13 @@ const Markdown = ({ text, options={}, allowedTag=[], components={} }: MarkdownPr
...allowedTag ...allowedTag
], ],
allowedAttributes: false, allowedAttributes: false,
allowedClasses: {
'*': ['align-middle'],
a: ['anchor', 'mr-1'],
svg: ['octicon-link'],
img: ['emoji', 'special']
},
allowedStyles: {}
}) })
} }
/> />