From 7770a5b569c6169b5d0c63eda530f76c561dc485 Mon Sep 17 00:00:00 2001
From: SquidSpirit <squid@squidspirit.com>
Date: Sat, 26 Jul 2025 00:33:17 +0800
Subject: [PATCH] BLOG-72 Fix img cannot be shown on content page (#74)

### Description

<https://www.npmjs.com/package/sanitize-html>

![image.png](/attachments/f35293b6-7c80-4a6f-917e-fa0d4cffa804)

### Package Changes

_No response_

### Screenshots

_No response_

### Reference

Resolves #72

### Checklist

- [x] A milestone is set
- [x] The related issuse has been linked to this branch

Reviewed-on: https://git.squidspirit.com/squid/blog/pulls/74
Co-authored-by: SquidSpirit <squid@squidspirit.com>
Co-committed-by: SquidSpirit <squid@squidspirit.com>
---
 frontend/src/lib/common/framework/ui/SafeHtml.svelte | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/frontend/src/lib/common/framework/ui/SafeHtml.svelte b/frontend/src/lib/common/framework/ui/SafeHtml.svelte
index a319116..29b718e 100644
--- a/frontend/src/lib/common/framework/ui/SafeHtml.svelte
+++ b/frontend/src/lib/common/framework/ui/SafeHtml.svelte
@@ -5,7 +5,9 @@
 
 	const { html }: { html: string } = $props();
 
-	const sanitizedHtml = $derived(sanitizeHtml(html));
+	const sanitizedHtml = $derived(
+		sanitizeHtml(html, { allowedTags: sanitizeHtml.defaults.allowedTags.concat(['img']) })
+	);
 </script>
 
 {@html sanitizedHtml}