add table to default sanitize allowlist
Nobody has claimed this yet.
- Dominant language
- MDX
- Stars
- 175k
- Forks
- 78.6k
- Avg merge
- 7h 19m
- Merged PRs (30d)
- 35
Description
Prerequisites
- I have searched for duplicate or closed feature requests
- I have read the contributing guidelines
Proposal
add table, tr, td, th, tbody, and colgroup as allowed tags and colspan, rowspan, and span to allowed attributes for the relevant elements to the default sanitizer configuration
Motivation and context
tables are a useful and static HTML object which I'm personally using to create a mini calendar in a popover for my chrome extension. this was mentioned in #30764 and I'm aware a workaround is easily possible but shouldn't be needed imo
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating Bootstrap's default sanitizer configuration and its related tests. Check how allowed tags and attributes are represented, then verify that the requested table elements and span attributes are accepted without allowing unrelated markup.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- html, javascript
- Domain
- frontend, security
- Issue type
- Feature
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 45/100