whitelist more css option in xss

UNDP-Data · Nov 15, 2024 · ca57d1a · ca57d1a
1 parent 5eff983
commit ca57d1a
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 3 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@undp-data/undp-visualization-library",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "main": "./dist/index.cjs",
   "module": "./dist/index.js",
   "browser": "./dist/index.umd.js",

diff --git a/src/Utils/string2HTML.tsx b/src/Utils/string2HTML.tsx
@@ -76,6 +76,7 @@ export function string2HTML(htmlString: string, data: any) {
         padding: true,
         border: true,
         'border-radius': true,
+        'border-color': true,
         display: true,
         flex: true,
         'flex-direction': true,
@@ -108,13 +109,22 @@ export function string2HTML(htmlString: string, data: any) {
         'margin-right': true,
         'margin-bottom': true,
         'z-index': true,
+        'word-wrap': true,
         visibility: true,
         opacity: true,
         filter: true,
         transform: true,
         transition: true,
         cursor: true,
         clip: true,
+        hyphens: true,
+        direction: true,
+        'word-break': true,
+        'max-width': true,
+        'min-width': true,
+        'max-height': true,
+        'min-height': true,
+        fill: true,
         'clip-path': true,
       },
     },