diff --git a/server/utils/htmlSanitizer.js b/server/utils/htmlSanitizer.js index cdb3cfb0..e9473d30 100644 --- a/server/utils/htmlSanitizer.js +++ b/server/utils/htmlSanitizer.js @@ -10,7 +10,7 @@ function sanitize(html) { allowedAttributes: { a: ['href', 'name', 'target'] }, - allowedSchemes: ['https'], + allowedSchemes: ['http', 'https', 'mailto'], allowProtocolRelative: false }