diff --git a/app/models/metadata_template.rb b/app/models/metadata_template.rb
index c778e1b2..e210fd2c 100644
--- a/app/models/metadata_template.rb
+++ b/app/models/metadata_template.rb
@@ -198,7 +198,7 @@ MetadataTemplate = Struct.new(:site, :document, :name, :label, :type,
 
   def allowed_attributes
     @allowed_attributes ||= %w[style href src alt controls data-align data-multimedia data-multimedia-inner id
-                               name].freeze
+                               name rel target referrerpolicy].freeze
   end
 
   def allowed_tags
diff --git a/package.json b/package.json
index d520c8f5..2ae4400a 100644
--- a/package.json
+++ b/package.json
@@ -12,6 +12,7 @@
     "@rails/activestorage": "^6.1.3-1",
     "@rails/ujs": "^6.1.3-1",
     "@rails/webpacker": "5.2.1",
+    "@suttyweb/editor": "^0.1.0",
     "babel-loader": "^8.2.2",
     "chart.js": "^3.5.1",
     "chartkick": "^4.0.5",
diff --git a/yarn.lock b/yarn.lock
index 50342862..e9bb4f1d 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1171,6 +1171,11 @@
   resolved "https://registry.yarnpkg.com/@stimulus/webpack-helpers/-/webpack-helpers-1.1.1.tgz#eff60cd4e58b921d1a2764dc5215f5141510f2c2"
   integrity sha512-XOkqSw53N9072FLHvpLM25PIwy+ndkSSbnTtjKuyzsv8K5yfkFB2rv68jU1pzqYa9FZLcvZWP4yazC0V38dx9A==
 
+"@suttyweb/editor@^0.1.0":
+  version "0.1.0"
+  resolved "https://registry.yarnpkg.com/@suttyweb/editor/-/editor-0.1.0.tgz#2dc451ceb7df39aaf2ab4c0372db177c4586014b"
+  integrity sha512-4P/lD3acOJM9iVo+c+OIf3yjA6NHuIVSNh782XfyDLGz8ZrJj7MEvpmJqiNHsqz7MT0gz5WHakM8GnU/C3bzXg==
+
 "@types/caseless@*":
   version "0.12.2"
   resolved "https://registry.yarnpkg.com/@types/caseless/-/caseless-0.12.2.tgz#f65d3d6389e01eeb458bd54dc8f52b95a9463bc8"