actually allow url('data:) in custom css

This commit is contained in:
Kendall Garner 2025-09-06 19:28:15 -07:00
parent 854222d2fa
commit c36735575f
No known key found for this signature in database
GPG key ID: 9355F387FE765C94

View file

@ -7,7 +7,7 @@ const SANITIZE_OPTIONS: Config = {
ALLOWED_URI_REGEXP: /^(http(s?):)?\/\/.+/i,
};
const regex = /(url\("?)(?!data:)/gim;
const regex = /(url\(["'](?!data:))/gim;
const addStyles = (output: string[], styles: CSSStyleDeclaration) => {
for (let prop = styles.length - 1; prop >= 0; prop -= 1) {