fix(mail(html)): remove "rel" attribute from sanitized HTML mails

We already add the rel="noopener" to external links, so it's probably
safe to remove it from all tags.
This commit is contained in:
Francis Lachapelle
2022-01-13 17:03:57 -05:00
parent 68608c4e7f
commit 3c26e04c52
@@ -538,6 +538,10 @@ _xmlCharsetForCharset (NSString *charset)
if ([lowerValue rangeOfString: @"url"].location != NSNotFound)
name = [NSString stringWithFormat: @"unsafe-%@", name];
}
else if ([name isEqualToString: @"rel"])
{
skipAttribute = YES;
}
else if ([name hasPrefix: @"on"])
{
// on Events