[SLING-8771] XSS Configuration should allow the HTML5 figure and figcaption tags

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: XSS Protection API 2.1.8
• Fix Version/s: XSS Protection API 2.1.10
• Component/s: XSS Protection API
• Assignee: Eric Norman
• Reporter: Eric Norman
• Created: 07/Oct/19 21:21
• Updated: 29/Oct/19 13:06
• Resolved: 07/Oct/19 23:00

Description

The HTML5 figure and figcaption tags should be allowed in output, currently those tags are removed.

The usage pattern is described at: http://html5doctor.com/the-figure-figcaption-elements/

The real world use case is that the ckeditor5 rich text editor emits the figure and figcaption tags in the output for images with a caption, but when a sling htl template outputs the same markup the figure and figcaption tags are removed in the output.