···

       
122
       
 
       
func visitNode(ctx *RenderContext, node *htmlparse.Node) {

     

       
123
       
 
       
	switch node.Type {

     

       
124
       
 
       
	case htmlparse.ElementNode:

     

       
125
       
-
       
		if node.Data == "img" {

     

       
126
       
 
       
			for i, attr := range node.Attr {

     

       
127
       
 
       
				if attr.Key != "src" {

     

       
128
       
 
       
					continue

     
···

       
142
       
 
       


     

       
143
       
 
       
func (rctx *RenderContext) Sanitize(html string) string {

     

       
144
       
 
       
	policy := bluemonday.UGCPolicy()

     

       
145
       
-
       
	policy.AllowAttrs("align", "style").Globally()

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
146
       
 
       
	policy.AllowStyles(

     

       
147
       
 
       
		"margin",

     

       
148
       
 
       
		"padding",

     

···

       
122
       
 
       
func visitNode(ctx *RenderContext, node *htmlparse.Node) {

     

       
123
       
 
       
	switch node.Type {

     

       
124
       
 
       
	case htmlparse.ElementNode:

     

       
125
       
+
       
		if node.Data == "img" || node.Data == "source" {

     

       
126
       
 
       
			for i, attr := range node.Attr {

     

       
127
       
 
       
				if attr.Key != "src" {

     

       
128
       
 
       
					continue

     
···

       
142
       
 
       


     

       
143
       
 
       
func (rctx *RenderContext) Sanitize(html string) string {

     

       
144
       
 
       
	policy := bluemonday.UGCPolicy()

     

       
145
       
+
       


     

       
146
       
+
       
	// video

     

       
147
       
+
       
	policy.AllowElements("video")

     

       
148
       
+
       
	policy.AllowAttrs("controls").OnElements("video")

     

       
149
       
+
       
	policy.AllowElements("source")

     

       
150
       
+
       
	policy.AllowAttrs("src", "type").OnElements("source")

     

       
151
       
+
       


     

       
152
       
+
       
	policy.AllowAttrs("align", "style", "width", "height").Globally()

     

       
153
       
 
       
	policy.AllowStyles(

     

       
154
       
 
       
		"margin",

     

       
155
       
 
       
		"padding",

     

···

       
41
       
 
       
  "image/x-rgb",

     

       
42
       
 
       
  "image/x-xbitmap",

     

       
43
       
 
       
  "image/x-xpixmap",

     

       
44
       
-
       
  "image/x-xwindowdump"

     

       
0
       
 
       

     

       
45
       
 
       
]

     

···

       
41
       
 
       
  "image/x-rgb",

     

       
42
       
 
       
  "image/x-xbitmap",

     

       
43
       
 
       
  "image/x-xpixmap",

     

       
44
       
+
       
  "image/x-xwindowdump",

     

       
45
       
+
       
  "video/mp4"

     

       
46
       
 
       
]