sanitizer: allow href and link in ckeditor

Author: zubeydecivelek

cds/modules/deposit/static/json/cds_deposit/forms/video.json

@@ -22,7 +22,7 @@
             "forcePasteAsPlainText": false,
             "extraAllowedContent": "*{color}; *[style]",
             "disableAutoInline": true,
-            "extraPlugins": "colorbutton",
+            "extraPlugins": "colorbutton,link",
             "toolbar": [
               [
                 "PasteText",
@@ -36,6 +36,10 @@
                 "Subscript",
                 "Superscript"
               ],
+              [
+                "Link",
+                "Unlink"
+              ],
               [
                 "TextColor"
               ],

cds/modules/records/serializers/json.py

@@ -36,6 +36,7 @@
 
 CUSTOM_ALLOWED_ATTRS = {
     **ALLOWED_HTML_ATTRS,
+    "a": ALLOWED_HTML_ATTRS.get("a", []) + ["href", "title", "target", "rel"],
     "span": ALLOWED_HTML_ATTRS.get("span", []) + ["style"],
     "p": ALLOWED_HTML_ATTRS.get("p", []) + ["style"],
 }

cds/modules/theme/assets/bootstrap3/js/cds_deposit/ckeditor-sanitizer.js

@@ -44,7 +44,7 @@ var sanitizeConfig = {
     "u",
     "ul",
   ],
-  ALLOWED_ATTR: ["style", "dir", "lang", "color"],
+  ALLOWED_ATTR: ["style", "dir", "lang", "color", "href", "title", "target", "rel"],
   ALLOW_STYLE: true,
   ALLOW_DATA_ATTR: false,
 };