talk/plugins/talk-plugin-rich-text/server/config.js

const config = {
  // Super strict rules to make sure users only submit the tags they are allowed
  dompurify: { ALLOWED_TAGS: ['b', 'i', 'blockquote'] },

  // Secure config for jsdom even when DOMPurify creates a document without a browsing context
  jsdom: {
    features: {
      FetchExternalResources: false, // disables resource loading over HTTP / filesystem
      ProcessExternalResources: false, // do not execute JS within script blocks
    },
  },
};

module.exports = config;