Filip/matrix-spec
1
0
Fork 0
mirror of https://github.com/matrix-org/matrix-spec synced 2026-03-26 04:54:10 +01:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Deprecate strike HTML tag

Browse source 
Replace it with `s` or `del`.

Signed-off-by: Kévin Commaille <zecakeh@tedomum.fr>
This commit is contained in:
Kévin Commaille 2024-02-26 15:10:48 +01:00
parent c4e69d8cb1
commit 493200bfbe
No known key found for this signature in database
GPG key ID: 29A48C1F03620416
1 changed files with 16 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
content/client-server-api/modules/instant_messaging.md
View file

@ -37,9 +37,24 @@ HTML injection, and similar attacks. The strongly suggested set of HTML
tags to permit, denying the use and rendering of anything else, is: tags to permit, denying the use and rendering of anything else, is:
`font`, `del`, `h1`, `h2`, `h3`, `h4`, `h5`, `h6`, `blockquote`, `p`, `font`, `del`, `h1`, `h2`, `h3`, `h4`, `h5`, `h6`, `blockquote`, `p`,
`a`, `ul`, `ol`, `sup`, `sub`, `li`, `b`, `i`, `u`, `strong`, `em`, `a`, `ul`, `ol`, `sup`, `sub`, `li`, `b`, `i`, `u`, `strong`, `em`,
`strike`, `code`, `hr`, `br`, `div`, `table`, `thead`, `tbody`, `tr`, `strike`, `s`, `code`, `hr`, `br`, `div`, `table`, `thead`, `tbody`, `tr`,
`th`, `td`, `caption`, `pre`, `span`, `img`, `details`, `summary`. `th`, `td`, `caption`, `pre`, `span`, `img`, `details`, `summary`.
{{% boxes/note %}}
HTML features MAY be deprecated and replaced by their modern equivalent without
requiring a [Spec Change Proposal](/proposals) when they are deprecated in the
WHATWG HTML Living Standard.
{{% /boxes/note %}}
{{% boxes/note %}}
{{% changed-in v="1.10" %}}
The `strike` tag is deprecated. Clients MUST stop sending new messages using
this tag and replace it with `s` or `del`.
{{% /boxes/note %}}
Not all attributes on those tags should be permitted as they may be Not all attributes on those tags should be permitted as they may be
avenues for other disruption attempts, such as adding `onclick` handlers avenues for other disruption attempts, such as adding `onclick` handlers
or excessively large text. Clients should only permit the attributes or excessively large text. Clients should only permit the attributes