From 3c881cd358348466c043ae02d1bf4d0294ecb47f Mon Sep 17 00:00:00 2001
From: Aevann1 <randomname42029@gmail.com>
Date: Sun, 7 Nov 2021 22:57:02 +0200
Subject: [PATCH] fdfd

---
 files/helpers/sanitize.py | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/files/helpers/sanitize.py b/files/helpers/sanitize.py
index 1fd8fc043..e2c40b5cd 100644
--- a/files/helpers/sanitize.py
+++ b/files/helpers/sanitize.py
@@ -75,7 +75,19 @@ no_images = ['b',
 						'span',
 						]
 
-allowed_attributes = {'*': ['href', 'style', 'src', 'class', 'title', 'rel', 'data-bs-original-name', 'direction', 'behavior', 'scrollamount']}
+def sanitize_marquee(tag, name, value):
+	if name in allowed_attributes['*'] or name in ['direction', 'behavior', 'scrollamount']: return True
+
+	if name in ['width', 'height']:
+		try: value = int(value)
+		except: return False
+		if 0 < value <= 200: return True
+
+	return False
+
+allowed_attributes = {
+		'*': ['href', 'style', 'src', 'class', 'title', 'rel', 'data-bs-original-name'],
+		'marquee': sanitize_marquee}
 
 allowed_protocols = ['http', 'https']