diff --git a/.eslintrc b/.eslintrc
index e2a42cc..cee9820 100644
--- a/.eslintrc
+++ b/.eslintrc
@@ -11,6 +11,7 @@ env:
globals:
sjcl: false
+ DOMPurify: false
# http://eslint.org/docs/rules/
rules:
diff --git a/js/privatebin.js b/js/privatebin.js
index ddc1372..0d34603 100644
--- a/js/privatebin.js
+++ b/js/privatebin.js
@@ -1763,6 +1763,7 @@ jQuery.PrivateBin = function($, sjcl, Base64, RawDeflate) {
});
// let showdown convert the HTML and sanitize HTML *afterwards*!
$plainText.html(
+ /** global: DOMPurify */
DOMPurify.sanitize(converter.makeHtml(text), {SAFE_FOR_JQUERY: true})
);
// add table classes from bootstrap css
diff --git a/tpl/bootstrap.php b/tpl/bootstrap.php
index e75614e..def90df 100644
--- a/tpl/bootstrap.php
+++ b/tpl/bootstrap.php
@@ -70,7 +70,7 @@ if ($MARKDOWN):
-
+
diff --git a/tpl/page.php b/tpl/page.php
index 6d636d0..9c1db28 100644
--- a/tpl/page.php
+++ b/tpl/page.php
@@ -48,7 +48,7 @@ if ($MARKDOWN):
-
+