moparisthebest/mail
1
0
Fork 0
mirror of https://github.com/moparisthebest/mail synced 2025-02-11 20:50:10 -05:00
Code Issues Releases Wiki Activity

Add <math> html tag to DOMpurity backlist to prevent HTTP leaks

Browse Source
This commit is contained in:
Tankred Hase 2015-04-22 18:01:53 +02:00
parent 898e19e3ea
commit 0dc04e659f
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/js/controller/app/read-sandbox.js
View File

@ -24,7 +24,7 @@ window.onmessage = function(e) {
if (e.data.removeImages) { if (e.data.removeImages) {
// remove http leaks // remove http leaks
document.body.innerHTML = DOMPurify.sanitize(html, { document.body.innerHTML = DOMPurify.sanitize(html, {
FORBID_TAGS: ['style', 'svg', 'audio', 'video'], FORBID_TAGS: ['style', 'svg', 'audio', 'video', 'math'],
FORBID_ATTR: ['src'] FORBID_ATTR: ['src']
}); });
} else { } else {