readme_renderer icon indicating copy to clipboard operation
readme_renderer copied to clipboard

Allow <a rel="me"> to pass the sanitiser?

Open GreenReaper opened this issue 1 year ago • 1 comments

While trying to verify a link from a Mastodon instance to a Mailman Postorius mailing list profile, I found that the rel="me" attribute on the reciprocal link back to Mastodon had been replaced by a rel="nofollow". After a little digging I found they were using this module, which does not include rel in the list of allowed attributes for <a>.

Would it be possible to enable <a rel>, or at least <a rel="me">? There are some problematic uses of rel, such as canonical, but they don't seem to be allowed in the variant of the attribute. I imagine license, author and prev/next might also be useful for documentation purposes.

GreenReaper avatar May 07 '24 20:05 GreenReaper