mirror of
https://github.com/vector-im/element-web.git
synced 2025-10-13 08:21:47 +02:00
Disallow data attribute, we don't need it currently
This commit is contained in:
parent
f9ee89b2f4
commit
96f5f92c7f
@ -153,7 +153,7 @@ const sanitizeHtmlParams = {
|
||||
allowedSchemes: ['http', 'https', 'ftp', 'mailto'],
|
||||
|
||||
allowedSchemesByTag: {
|
||||
img: [ 'data', 'mxc' ],
|
||||
img: ['mxc'],
|
||||
},
|
||||
allowProtocolRelative: false,
|
||||
|
||||
|
Loading…
x
Reference in New Issue
Block a user