]> BookStack Code Mirror - bookstack/commit
Added content filtering of tags with javascript or data in values attr
authorDan Brown <redacted>
Thu, 11 Aug 2022 09:26:33 +0000 (10:26 +0100)
committerDan Brown <redacted>
Thu, 11 Aug 2022 09:28:32 +0000 (10:28 +0100)
commit5f7cd735ea6904b909c176cd040a5f5e3f7eec90
tree0ee841e77a770c9a2783347bba70127161774141
parent375abca1ee6721feb8de792011f6798fba5e646c
Added content filtering of tags with javascript or data in values attr

Case would be blocked by CSP but adding for cases where CSP may not be
active when content taken externally.

For #3636
app/Util/HtmlContentFilter.php
tests/Entity/PageContentTest.php