Fixed filter XSS should allow ordered list specify start number

1 files changed, 4 insertions, 0 deletions

diff --git a/public/js/render.js b/public/js/render.js
index dadd52f7..9c1fa273 100644
--- a/public/js/render.js
+++ b/public/js/render.js
@@ -16,6 +16,10 @@ var filterXSSOptions = {
             // escape its value using built-in escapeAttrValue function
             return name + '="' + filterXSS.escapeAttrValue(value) + '"';
         }
+        // allow ol specify start number
+        if (tag === 'ol' && name === 'start') {
+            return name + '="' + filterXSS.escapeAttrValue(value) + '"';
+        }
     }
 };