mirror of
https://github.com/inverse-inc/sogo.git
synced 2026-05-22 03:45:25 +00:00
fix(mail(html)): remove "rel" attribute from sanitized HTML mails
We already add the rel="noopener" to external links, so it's probably safe to remove it from all tags.
This commit is contained in:
@@ -538,6 +538,10 @@ _xmlCharsetForCharset (NSString *charset)
|
||||
if ([lowerValue rangeOfString: @"url"].location != NSNotFound)
|
||||
name = [NSString stringWithFormat: @"unsafe-%@", name];
|
||||
}
|
||||
else if ([name isEqualToString: @"rel"])
|
||||
{
|
||||
skipAttribute = YES;
|
||||
}
|
||||
else if ([name hasPrefix: @"on"])
|
||||
{
|
||||
// on Events
|
||||
|
||||
Reference in New Issue
Block a user