feat: allow all border-collapse CSS property values

Closes #201
flavorjones · Jul 31, 2021 · d3b927d · d3b927d
1 parent 78712b5
commit d3b927d
Show file tree

Hide file tree

Showing 3 changed files with 35 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -5,6 +5,7 @@
 ### Features
 
 * Allow HTML5 element `wbr`.
+* Allow all CSS property values for `border-collapse`. [[#201](https://github.com/flavorjones/loofah/issues/201)]
 
 
 ### Changes

diff --git a/lib/loofah/html5/safelist.rb b/lib/loofah/html5/safelist.rb
@@ -638,6 +638,8 @@ module SafeList
                                           "green",
                                           "groove",
                                           "hidden",
+                                          "inherit",
+                                          "initial",
                                           "inset",
                                           "italic",
                                           "left",
@@ -653,16 +655,19 @@ module SafeList
                                           "pointer",
                                           "purple",
                                           "red",
+                                          "revert",
                                           "ridge",
                                           "right",
+                                          "separate",
                                           "silver",
                                           "solid",
                                           "teal",
-                                          "thin",
                                           "thick",
+                                          "thin",
                                           "top",
                                           "transparent",
                                           "underline",
+                                          "unset",
                                           "white",
                                           "yellow",
                                         ])

diff --git a/test/integration/test_ad_hoc.rb b/test/integration/test_ad_hoc.rb
@@ -287,5 +287,33 @@ def test_dont_remove_whitespace_between_tags
 
       assert_equal(expected, actual.to_html)
     end
+
+    it "allows border-collapse property values" do
+      # https://github.com/flavorjones/loofah/issues/201
+      # https://developer.mozilla.org/en-US/docs/Web/CSS/border-collapse
+      input = <<~EOF
+        <table style='border-collapse: collapse;'></table>
+        <table style='border-collapse: separate;'></table>
+        <table style='border-collapse: not-allowed;'></table>
+        <table style='border-collapse: inherit;'></table>
+        <table style='border-collapse: initial;'></table>
+        <table style='border-collapse: revert;'></table>
+        <table style='border-collapse: unset;'></table>
+      EOF
+
+      expected = <<~EOF
+        <table style=\"border-collapse:collapse;\"></table>
+        <table style=\"border-collapse:separate;\"></table>
+        <table></table>
+        <table style=\"border-collapse:inherit;\"></table>
+        <table style=\"border-collapse:initial;\"></table>
+        <table style=\"border-collapse:revert;\"></table>
+        <table style=\"border-collapse:unset;\"></table>
+      EOF
+
+      actual = Loofah.scrub_fragment(input, :escape)
+
+      assert_equal(expected, actual.to_html)
+    end
   end
 end