diff --git a/lib/loofah/html5/safelist.rb b/lib/loofah/html5/safelist.rb index ae194fe..b65a212 100644 --- a/lib/loofah/html5/safelist.rb +++ b/lib/loofah/html5/safelist.rb @@ -623,11 +623,12 @@ module SafeList ]) ACCEPTABLE_CSS_PROPERTIES = Set.new([ - "azimuth", + "accent-color", "align-content", "align-items", "align-self", "aspect-ratio", + "azimuth", "background-color", "border-bottom-color", "border-collapse", @@ -661,7 +662,10 @@ module SafeList "line-height", "list-style", "list-style-type", + "max-height", "max-width", + "min-height", + "min-width", "order", "overflow", "overflow-x", @@ -674,6 +678,7 @@ module SafeList "pause-before", "pitch", "pitch-range", + "position", "richness", "speak", "speak-header", @@ -681,15 +686,37 @@ module SafeList "speak-punctuation", "speech-rate", "stress", + "scroll-margin", + "scroll-padding", "text-align", "text-decoration", + "text-decoration-color", + "text-decoration-line", + "text-decoration-skip", + "text-decoration-skip-ink", + "text-decoration-style", + "text-decoration-thickness", + "text-emphasis", + "text-emphasis-color", + "text-emphasis-position", + "text-emphasis-style", "text-indent", + "text-justify", + "text-orientation", + "text-overflow", + "text-rendering", + "text-shadow", + "text-size-adjust", + "text-transform", + "text-underline-offset", + "text-underline-position", "unicode-bidi", "vertical-align", "voice-family", "volume", "white-space", "width", + "z-index", ]) ACCEPTABLE_CSS_KEYWORDS = Set.new([ @@ -712,16 +739,22 @@ module SafeList "italic", "left", "medium", + "no-repeat", "none", "normal", "nowrap", "outset", "pointer", + "repeat", + "repeat-x", + "repeat-y", "revert", "ridge", "right", + "round", "separate", "solid", + "space", "thick", "thin", "top",