Fix image injection for custom markup

1 files changed, 3 insertions, 1 deletions

diff --git a/shared/core-utils/renderer/html.ts b/shared/core-utils/renderer/html.ts
index bbf8b3fbd..c9757be85 100644
--- a/shared/core-utils/renderer/html.ts
+++ b/shared/core-utils/renderer/html.ts
@@ -30,11 +30,13 @@ export function getCustomMarkupSanitizeOptions (additionalAllowedTags: string[]
     allowedTags: [
       ...base.allowedTags,
       ...additionalAllowedTags,
-      'div', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6'
+      'div', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'img'
     ],
     allowedSchemes: base.allowedSchemes,
     allowedAttributes: {
       ...base.allowedAttributes,
+
+      'img': [ 'src', 'alt' ],
       '*': [ 'data-*', 'style' ]
     }
   }