allow `lang` attribute to be federated (resolves #11) + allow `aria-hidden`, `aria-label`, & `lang` on any allowed element

1 files changed, 6 insertions, 5 deletions

diff --git a/app/lib/sanitize_config.rb b/app/lib/sanitize_config.rb
index d5ac407b5..bf2e6c167 100644
--- a/app/lib/sanitize_config.rb
+++ b/app/lib/sanitize_config.rb
@@ -121,11 +121,12 @@ class Sanitize
       elements: %w(p br span a abbr del pre sub sup blockquote code b strong u i s em h1 h2 h3 h4 h5 h6 ul ol li hr),
 
       attributes: {
-        'a'          => %w(href rel class title alt aria-hidden aria-label),
-        'span'       => %w(class aria-hidden aria-label),
-        'abbr'       => %w(title aria-hidden aria-label),
-        'blockquote' => %w(cite aria-hidden aria-label),
-        'p'          => %w(class aria-hidden aria-label),
+        'a'          => %w(href rel class title alt),
+        'span'       => %w(class),
+        'abbr'       => %w(title),
+        'blockquote' => %w(cite),
+        'p'          => %w(class),
+        :all         => %w(aria-hidden aria-label lang),
       },
 
       add_attributes: {