Merge pull request #189 from editor-js/fix/xss-problem

Sanitization configuration improved
editor-js · Dec 5, 2022 · 72c651d · 72c651d
2 parents 5ee4e1e + 699f3bd
commit 72c651d
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 3 deletions.
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@editorjs/image",
-  "version": "2.7.0",
+  "version": "2.7.1",
   "keywords": [
     "codex editor",
     "tool",

diff --git a/src/index.js b/src/index.js
@@ -272,8 +272,11 @@ export default class ImageTool {
       /**
        * Paste HTML into Editor
        */
-      tags: [ 'img' ],
-
+      tags: [
+        {
+          img: { src: true },
+        },
+      ],
       /**
        * Paste URL of image into the Editor
        */