Retain attribute dominant-baseline in DOMpurify sanitization

mermaid-js · Apr 21, 2022 · b472fb4 · b472fb4
1 parent a6299d8
commit b472fb4
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/src/mermaidAPI.js b/src/mermaidAPI.js
@@ -545,7 +545,10 @@ const render = function (id, _txt, cb, container) {
 </iframe>`;
   } else {
     if (cnf.securityLevel !== 'loose') {
-      svgCode = DOMPurify.sanitize(svgCode, { ADD_TAGS: ['foreignobject'] });
+      svgCode = DOMPurify.sanitize(svgCode, {
+        ADD_TAGS: ['foreignobject'],
+        ADD_ATTR: ['dominant-baseline'],
+      });
     }
   }