diff --git a/components/Editor.vue b/components/Editor.vue index 7d063a60..2d9be390 100644 --- a/components/Editor.vue +++ b/components/Editor.vue @@ -133,7 +133,7 @@ export default { new ListItem(), new Code(), new History(), - new Link({ openOnClick: false }), + new Link({ openOnClick: false, target: '_blank' }), new Bold(), new Italic(), new Strike(), diff --git a/server/api/controller/event.js b/server/api/controller/event.js index 210fe513..9e93bd33 100644 --- a/server/api/controller/event.js +++ b/server/api/controller/event.js @@ -351,7 +351,7 @@ const eventController = { const eventDetails = { title: body.title, // remove html tags - description: helpers.sanitizeHTML(linkifyHtml(body.description)), + description: helpers.sanitizeHTML(linkifyHtml(body.description, { target: '_blank' })), multidate: body.multidate, start_datetime: body.start_datetime, end_datetime: body.end_datetime, diff --git a/server/helpers.js b/server/helpers.js index 58c96196..75c6bb90 100644 --- a/server/helpers.js +++ b/server/helpers.js @@ -51,7 +51,7 @@ module.exports = { return domPurify.sanitize(html, { ALLOWED_TAGS: ['p', 'h1', 'h2', 'h3', 'h4', 'h5', 'br', 'h6', 'b', 'a', 'li', 'ul', 'ol', 'code', 'blockquote', 'u', 's', 'strong'], - ALLOWED_ATTR: ['href'] + ALLOWED_ATTR: ['href', 'target'] }) },