Allow hyphen in language name (#9873) (#9880)

Co-authored-by: techknowlogick <matti@mdranta.net>
go-gitea · Jan 20, 2020 · f2e9d4b · f2e9d4b
1 parent e878d74
commit f2e9d4b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/modules/markup/sanitizer.go b/modules/markup/sanitizer.go
@@ -38,7 +38,7 @@ func NewSanitizer() {
 func ReplaceSanitizer() {
 	sanitizer.policy = bluemonday.UGCPolicy()
 	// We only want to allow HighlightJS specific classes for code blocks
-	sanitizer.policy.AllowAttrs("class").Matching(regexp.MustCompile(`^language-\w+$`)).OnElements("code")
+	sanitizer.policy.AllowAttrs("class").Matching(regexp.MustCompile(`^language-[\w-]+$`)).OnElements("code")
 
 	// Checkboxes
 	sanitizer.policy.AllowAttrs("type").Matching(regexp.MustCompile(`^checkbox$`)).OnElements("input")