From b0d70d9bdba5f50281a404ba9380744ba977bc49 Mon Sep 17 00:00:00 2001
From: Matt Baer <matt@write.as>
Date: Thu, 25 Jul 2019 22:54:11 -0400
Subject: [PATCH] Support <audio> element

This whitelists the HTML5 <audio> element and adds some basic style to
make it look nice.
---
 less/core.less | 6 +++++-
 postrender.go  | 4 +++-
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/less/core.less b/less/core.less
index 2c918bd..7e39f35 100644
--- a/less/core.less
+++ b/less/core.less
@@ -108,9 +108,13 @@ body {
 		code {
 			.article-code;
 		}
-		img, video {
+		img, video, audio {
 			max-width: 100%;
 		}
+		audio {
+			width: 100%;
+			white-space: initial;
+		}
 		pre {
 			.code-block;
 
diff --git a/postrender.go b/postrender.go
index 31a3163..af715be 100644
--- a/postrender.go
+++ b/postrender.go
@@ -156,10 +156,12 @@ func friendlyPostTitle(content, friendlyId string) string {
 
 func getSanitizationPolicy() *bluemonday.Policy {
 	policy := bluemonday.UGCPolicy()
-	policy.AllowAttrs("src", "style").OnElements("iframe", "video")
+	policy.AllowAttrs("src", "style").OnElements("iframe", "video", "audio")
+	policy.AllowAttrs("src", "type").OnElements("source")
 	policy.AllowAttrs("frameborder", "width", "height").Matching(bluemonday.Integer).OnElements("iframe")
 	policy.AllowAttrs("allowfullscreen").OnElements("iframe")
 	policy.AllowAttrs("controls", "loop", "muted", "autoplay").OnElements("video")
+	policy.AllowAttrs("controls", "loop", "muted", "autoplay", "preload").OnElements("audio")
 	policy.AllowAttrs("target").OnElements("a")
 	policy.AllowAttrs("style", "class", "id").Globally()
 	policy.AllowURLSchemes("http", "https", "mailto", "xmpp")