Adding HTML5 video capability.

javifloresi · Sep 11, 2015 · 77e649f · 77e649f
1 parent 5d34ccd
commit 77e649f
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/gems/canvas_sanitize/lib/canvas_sanitize/canvas_sanitize.rb b/gems/canvas_sanitize/lib/canvas_sanitize/canvas_sanitize.rb
@@ -79,7 +79,7 @@ def self.clean_style_value(config, value)
           'hr', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'h7', 'h8',
           'del', 'ins', 'iframe', 'font',
           'colgroup', 'dd', 'div', 'dl', 'dt', 'em', 'figure', 'figcaption', 'i', 'img', 'li', 'ol', 'p', 'pre',
-          'q', 'small', 'span', 'strike', 'strong', 'sub', 'sup', 'table', 'tbody', 'td',
+          'q', 'small', 'source', 'span', 'strike', 'strong', 'sub', 'sup', 'table', 'tbody', 'td',
           'tfoot', 'th', 'thead', 'tr', 'u', 'ul', 'object', 'embed', 'param', 'video', 'audio'],
 
       :attributes => {
@@ -144,8 +144,9 @@ def self.clean_style_value(config, value)
           'ul' => ['type'],
           'param' => ['name', 'value'],
           'object' => ['width', 'height', 'style', 'data', 'type', 'classid', 'codebase'],
+          'source' => ['src', 'type'],
           'embed' => ['name', 'src', 'type', 'allowfullscreen', 'pluginspage', 'wmode', 'allowscriptaccess', 'width', 'height'],
-          'video' => ['name', 'src', 'allowfullscreen', 'muted', 'poster', 'width', 'height'],
+          'video' => ['name', 'src', 'allowfullscreen', 'muted', 'poster', 'width', 'height', 'controls'],
           'audio' => ['name', 'src', 'muted'],
           'font' => ['face', 'color', 'size'],
       },