Add <math> html tag to DOMpurity backlist to prevent HTTP leaks

8 years ago · 0dc04e659f
parent 898e19e3ea
commit 0dc04e659f
1 changed files with 1 additions and 1 deletions
--- a/src/js/controller/app/read-sandbox.js
+++ b/src/js/controller/app/read-sandbox.js
@ -24,7 +24,7 @@ window.onmessage = function(e) {
    if (e.data.removeImages) {
        // remove http leaks
        document.body.innerHTML = DOMPurify.sanitize(html, {
-            FORBID_TAGS: ['style', 'svg', 'audio', 'video'],
+            FORBID_TAGS: ['style', 'svg', 'audio', 'video', 'math'],
            FORBID_ATTR: ['src']
        });
    } else {