Merge remote-tracking branch 'upstream/pull/5620'

[rails.git] / config / initializers / sanitize.rb

diff --git a/config/initializers/sanitize.rb b/config/initializers/sanitize.rb
index c9d6a5dbac75d48b693e7b1927c19b1c9a297f30..f8f2b784d9ac7c17cd3d63755fca41b48ccbcdd6 100644 (file)
--- a/config/initializers/sanitize.rb
+++ b/config/initializers/sanitize.rb
@@ -2,6 +2,10 @@ Sanitize::Config::OSM = Sanitize::Config.merge(
   Sanitize::Config::RELAXED,
   :elements => Sanitize::Config::RELAXED[:elements] - %w[div style],
   :remove_contents => %w[script style],
+  :attributes => Sanitize::Config.merge(
+    Sanitize::Config::RELAXED[:attributes],
+    "img" => Sanitize::Config::RELAXED[:attributes]["img"] + ["loading"]
+  ),
   :transformers => lambda do |env|
     style = env[:node]["style"] || ""
 
@@ -24,5 +28,7 @@ Sanitize::Config::OSM = Sanitize::Config.merge(
 
       env[:node]["rel"] = rel.split.select { |r| r == "me" }.append("nofollow", "noopener", "noreferrer").sort.join(" ")
     end
+
+    env[:node]["loading"] = "lazy" if env[:node_name] == "img"
   end
 )