allow data protocol in images

closes #721
slab · Jun 3, 2016 · 74fc8bb · 74fc8bb
1 parent 3525e2d
commit 74fc8bb
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 11 deletions.
diff --git a/formats/image.js b/formats/image.js
@@ -1,5 +1,5 @@
 import Embed from '../blots/embed';
-import Link from '../formats/link';
+import Link, { sanitize } from '../formats/link';
 
 
 class Image extends Embed {
@@ -16,7 +16,7 @@ class Image extends Embed {
   }
 
   static sanitize(url) {
-    return Link.sanitize(url);
+    return sanitize(url, ['http', 'https', 'data']) ? url : '//:0';
   }
 
   static value(domNode) {

diff --git a/formats/link.js b/formats/link.js
@@ -15,14 +15,7 @@ class Link extends Inline {
   }
 
   static sanitize(url) {
-    let anchor = document.createElement('a');
-    anchor.href = url;
-    let protocol = anchor.href.slice(0, anchor.href.indexOf(':'));
-    if (['http', 'https', 'mailto'].indexOf(protocol) > -1) {
-      return url;
-    } else {
-      return this.SANITIZED_URL;
-    }
+    return sanitize(url, ['http', 'https', 'mailto']) ? url : this.SANITIZED_URL;
   }
 
   format(name, value) {
@@ -36,4 +29,12 @@ Link.tagName = 'A';
 Link.SANITIZED_URL = 'about:blank';
 
 
-export default Link;
+function sanitize(url, protocols) {
+  let anchor = document.createElement('a');
+  anchor.href = url;
+  let protocol = anchor.href.slice(0, anchor.href.indexOf(':'));
+  return protocols.indexOf(protocol) > -1;
+}
+
+
+export { Link as default, sanitize };