FEATURE: whitelist data for themes

app/assets/javascripts/pretty-text/white-lister.js.es6

@@ -137,7 +137,12 @@ const DEFAULT_LIST = [
   'div.quote-controls',
   'div.title',
   'div[align]',
-  'div[data-theme-*]',
+  'div[data-*]', /* This may seem a bit much but polls does
+                    it anyway and this is needed for themes,
+                    special code in sanitizer handles data-*
+                    nothing exists for data-theme-* and we
+                    don't want to slow sanitize for this case
+                  */
   'div[dir]',
   'dl',
   'dt',

spec/components/pretty_text_spec.rb

@@ -1262,4 +1262,9 @@ HTML
     HTML
   end
 
+  it "has a proper data whitlist on div" do
+    cooked = PrettyText.cook("<div data-theme-a='a'>test</div>")
+    expect(cooked).to include("data-theme-a")
+  end
+
 end