From 3345ccb035de737977423bd2740643dc3960042e Mon Sep 17 00:00:00 2001
From: Ryan Wang <i@ryanc.cc>
Date: Sun, 17 Aug 2025 23:38:00 +0800
Subject: [PATCH] Merge pull request #7695 from ruibaby/feat/comment-a-target

Allow target attribute on <a> tags in comment sanitizer
---
 .../run/halo/app/content/comment/AbstractCommentService.java  | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/application/src/main/java/run/halo/app/content/comment/AbstractCommentService.java b/application/src/main/java/run/halo/app/content/comment/AbstractCommentService.java
index 34a50514a..24061fd10 100644
--- a/application/src/main/java/run/halo/app/content/comment/AbstractCommentService.java
+++ b/application/src/main/java/run/halo/app/content/comment/AbstractCommentService.java
@@ -28,7 +28,9 @@ public abstract class AbstractCommentService {
         // Allow <s> tag, which is used for strikethrough
         .addTags("s")
         // Allow <code> tag's class attribute, for syntax highlighting
-        .addAttributes("code", "class");
+        .addAttributes("code", "class")
+        // Allow <a> tag's target attribute
+        .addAttributes("a", "target");
 
     protected Mono<User> fetchCurrentUser() {
         return ReactiveSecurityContextHolder.getContext()