docusealco
diff --git a/‎app/javascript/elements/html_editor.js‎
Lines changed: 1 addition & 1 deletion b/‎app/javascript/elements/html_editor.js‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎app/javascript/template_builder/dynamic_editor.js‎
Lines changed: 1 addition & 1 deletion b/‎app/javascript/template_builder/dynamic_editor.js‎
Lines changed: 1 addition & 1 deletion
@@ -111,7 +111,7 @@ const DROP_ATTRS = [
   'background', 'data', 'cite', 'ping', 'longdesc', 'manifest', 'profile'
 ]
 
-const SAFE_URL_REGEXP = /^(?:https?:\/\/|data:image\/|blob:|mailto:|tel:|\{)/i
+const SAFE_URL_REGEXP = /^(?:https?:\/\/|data:image\/|blob:|mailto:|tel:|\{|#)/i
 
 function isSafeAttr (name, value) {
   const lowerName = name.toLowerCase()
 
@@ -103,7 +103,7 @@ const DROP_ATTRS = [
   'background', 'data', 'cite', 'ping', 'longdesc', 'manifest', 'profile'
 ]
 
-const SAFE_URL_REGEXP = /^(?:https?:\/\/|data:image\/|blob:|mailto:|tel:|\{)/i
+const SAFE_URL_REGEXP = /^(?:https?:\/\/|data:image\/|blob:|mailto:|tel:|\{|#)/i
 
 function isSafeAttr (name, value) {
   const lowerName = name.toLowerCase()
Original file line number	Diff line number	Diff line change
`@@ -111,7 +111,7 @@ const DROP_ATTRS = [`
`111`	`111`	`'background', 'data', 'cite', 'ping', 'longdesc', 'manifest', 'profile'`
`112`	`112`	`]`
`113`	`113`
`114`		`-const SAFE_URL_REGEXP = /^(?:https?:\/\/\|data:image\/\|blob:\|mailto:\|tel:\|\{)/i`
	`114`	`+const SAFE_URL_REGEXP = /^(?:https?:\/\/\|data:image\/\|blob:\|mailto:\|tel:\|\{\|#)/i`
`115`	`115`
`116`	`116`	`function isSafeAttr (name, value) {`
`117`	`117`	`const lowerName = name.toLowerCase()`
Original file line number	Diff line number	Diff line change
`@@ -103,7 +103,7 @@ const DROP_ATTRS = [`
`103`	`103`	`'background', 'data', 'cite', 'ping', 'longdesc', 'manifest', 'profile'`
`104`	`104`	`]`
`105`	`105`
`106`		`-const SAFE_URL_REGEXP = /^(?:https?:\/\/\|data:image\/\|blob:\|mailto:\|tel:\|\{)/i`
	`106`	`+const SAFE_URL_REGEXP = /^(?:https?:\/\/\|data:image\/\|blob:\|mailto:\|tel:\|\{\|#)/i`
`107`	`107`
`108`	`108`	`function isSafeAttr (name, value) {`
`109`	`109`	`const lowerName = name.toLowerCase()`