From d2a3a73d3c6585b3edad6be1dfa6379f319cd061 Mon Sep 17 00:00:00 2001
From: Georgy Litvinov <git@litvinovg.pro>
Date: Mon, 3 Aug 2020 16:16:02 +0200
Subject: [PATCH] Antisamy policy fixes

---
 .../vitro/webapp/web/antisamy-vitro-1.4.4.xml        | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/api/src/main/resources/edu/cornell/mannlib/vitro/webapp/web/antisamy-vitro-1.4.4.xml b/api/src/main/resources/edu/cornell/mannlib/vitro/webapp/web/antisamy-vitro-1.4.4.xml
index 80d38bf37..7b493c1fa 100644
--- a/api/src/main/resources/edu/cornell/mannlib/vitro/webapp/web/antisamy-vitro-1.4.4.xml
+++ b/api/src/main/resources/edu/cornell/mannlib/vitro/webapp/web/antisamy-vitro-1.4.4.xml
@@ -106,8 +106,8 @@ http://www.w3.org/TR/html401/struct/global.html
         <regexp name="angle" value="(-|\+)?([0-9]+(\.[0-9]+)?)(deg|grads|rad)"/>
         <regexp name="time" value="([0-9]+(\.[0-9]+)?)(ms|s)"/>
         <regexp name="frequency" value="([0-9]+(\.[0-9]+)?)(hz|khz)"/>
-        <regexp name="length" value="((-|\+)?0|(-|\+)?([0-9]+(\.[0-9]+)?)(em|ex|px|in|cm|mm|pt|pc))"/>
-        <regexp name="positiveLength" value="((\+)?0|(\+)?([0-9]+(\.[0-9]+)?)(em|ex|px|in|cm|mm|pt|pc))"/>
+        <regexp name="length" value="((-|\+)?0|(-|\+)?([0-9]+(\.[0-9]+)?)(rem|em|ex|px|in|cm|mm|pt|pc))"/>
+        <regexp name="positiveLength" value="((\+)?0|(\+)?([0-9]+(\.[0-9]+)?)(rem|em|ex|px|in|cm|mm|pt|pc))"/>
         <regexp name="percentage" value="(-|\+)?([0-9]+(\.[0-9]+)?)%"/>
         <regexp name="positivePercentage" value="(\+)?([0-9]+(\.[0-9]+)?)%"/>
 
@@ -149,6 +149,14 @@ http://www.w3.org/TR/html401/struct/global.html
             </regexp-list>
         </attribute>
 
+        <attribute name="dir" description="The dir attribute specifies the text direction of the element's content.">
+            <literal-list>
+                <literal value="ltr"/>
+                <literal value="rtl"/>
+                <literal value="auto"/>
+            </literal-list>
+        </attribute>
+
         <attribute name="class" description="The 'class' of any HTML attribute is usually a single word, but it can also be a list of class names separated by spaces">
             <regexp-list>
                 <regexp name="htmlClass"/>