mirrors/element-web
1
0
Fork 0
mirror of https://github.com/vector-im/element-web.git synced 2025-10-13 16:32:10 +02:00
Code Issues Projects Releases Wiki Activity

Disallow data attribute, we don't need it currently

Browse Source
This commit is contained in:
Luke Barnard 2017-07-10 15:44:41 +01:00
parent f9ee89b2f4
commit 96f5f92c7f
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/HtmlUtils.js
View File

@ -153,7 +153,7 @@ const sanitizeHtmlParams = {
allowedSchemes: ['http', 'https', 'ftp', 'mailto'], allowedSchemes: ['http', 'https', 'ftp', 'mailto'],
allowedSchemesByTag: { allowedSchemesByTag: {
img: [ 'data', 'mxc' ], img: ['mxc'],
}, },
allowProtocolRelative: false, allowProtocolRelative: false,