fix: Preserve aria and role attributes

Author: fsbraun

djangocms_text/html.py

@@ -81,7 +81,7 @@ def __call__(self) -> dict[str, Union[dict[str, set[str]], set[str], None]]:
         "cms-plugin": {"id", "title", "name", "alt", "render-plugin", "type"},
         "*": {"style", "class"},
     },
-    generic_attribute_prefixes={"data-"},
+    generic_attribute_prefixes={"data-", "aria-", "role-"},
 )
 #: An instance of NH3Parser with the default configuration for CMS text content.
 

tests/test_html.py

@@ -99,6 +99,30 @@ def test_clean_html_with_sanitize_disabled(self):
         finally:
             settings.TEXT_HTML_SANITIZE = old_text_html_sanitize
 
+    def test_clean_html_preserves_aria_attributes(self):
+        original = '<span aria-label="foo">foo</span>'
+        cleaned = html.clean_html(
+            original,
+            full=False,
+        )
+        self.assertHTMLEqual(original, cleaned)
+
+    def test_clean_html_preserves_data_attributes(self):
+        original = '<span data-test-attr="foo">foo</span>'
+        cleaned = html.clean_html(
+            original,
+            full=False,
+        )
+        self.assertHTMLEqual(original, cleaned)
+
+    def test_clean_html_preserves_role_attribute(self):
+        original = '<span role="button">foo</span>'
+        cleaned = html.clean_html(
+            original,
+            full=False,
+        )
+        self.assertHTMLEqual(original, cleaned)
+
 
 class HTMLDynamicAttriutesTest(TestFixture, CMSTestCase):
     def test_dynamic_link(self):