Merge pull request #206 from taigaio/feat/allow-checkbox

feat: only allow checkbox
taigaio · Apr 25, 2024 · a1cbbaf · a1cbbaf
2 parents c70efbd + b95adc9
commit a1cbbaf
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/app/js/angular-sanitize.js b/app/js/angular-sanitize.js
@@ -485,6 +485,14 @@ function $SanitizeProvider() {
         if (!ignoreCurrentElement && blockedElements[tag]) {
           ignoreCurrentElement = tag;
         }
+        const validCheckbox = validElements['input'] && validAttrs['checked'];
+
+        if (validCheckbox) {
+          if (tag === 'input' && attrs.type !== 'checkbox') {
+            return;
+          }
+        }
+
         if (!ignoreCurrentElement && validElements[tag] === true) {
           out('<');
           out(tag);