lib/onebox/sanitize_config.rb in onebox-1.9.15 vs lib/onebox/sanitize_config.rb in onebox-1.9.16

@@ -15,10 +15,11 @@
         'iframe' => %w[allowfullscreen frameborder height scrolling src width data-original-href],
         'source' => %w[src type],
         'video' => %w[controls height loop width autoplay muted poster],
         'path' => %w[d],
         'svg' => ['aria-hidden', 'width', 'height', 'viewbox'],
-        'div' => [:data], # any data-* attributes
+        'div' => [:data], # any data-* attributes,
+        'span' => [:data], # any data-* attributes
       },
 
       add_attributes: {
         'iframe' => {
           'seamless' => 'seamless',