diff options
| author |  dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> | 2022-11-08 11:11:35 +0100 |
|---|---|---|
| committer |  GitHub <noreply@github.com> | 2022-11-08 11:11:35 +0100 |
| commit | a9a43beca238516d5296829d13982e96ad7f8f2c (patch) | |
| tree | 216984f21c1142b7bb5a046f0dc9a53061f1dde5 /vendor/github.com/microcosm-cc/bluemonday/helpers.go | |
| parent | [chore] dependabot: prefix correctly, ignore npm deps (#1001) (diff) | |
| download | gotosocial-a9a43beca238516d5296829d13982e96ad7f8f2c.tar.xz | |
[chore]: Bump github.com/microcosm-cc/bluemonday from 1.0.20 to 1.0.21 (#1004)
Bumps [github.com/microcosm-cc/bluemonday](https://github.com/microcosm-cc/bluemonday) from 1.0.20 to 1.0.21.
- [Release notes](https://github.com/microcosm-cc/bluemonday/releases)
- [Commits](https://github.com/microcosm-cc/bluemonday/compare/v1.0.20...v1.0.21)
---
updated-dependencies:
- dependency-name: github.com/microcosm-cc/bluemonday
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Diffstat (limited to 'vendor/github.com/microcosm-cc/bluemonday/helpers.go')
| -rw-r--r-- | vendor/github.com/microcosm-cc/bluemonday/helpers.go | 9 |
1 files changed, 5 insertions, 4 deletions
diff --git a/vendor/github.com/microcosm-cc/bluemonday/helpers.go b/vendor/github.com/microcosm-cc/bluemonday/helpers.go index d4039492e..2b03d7e7d 100644 --- a/vendor/github.com/microcosm-cc/bluemonday/helpers.go +++ b/vendor/github.com/microcosm-cc/bluemonday/helpers.go @@ -193,10 +193,11 @@ func (p *Policy) AllowImages() { // http://en.wikipedia.org/wiki/Data_URI_scheme // // Images must have a mimetype matching: -// image/gif -// image/jpeg -// image/png -// image/webp +// +// image/gif +// image/jpeg +// image/png +// image/webp // // NOTE: There is a potential security risk to allowing data URIs and you should // only permit them on content you already trust. |