From 72321ec545ed4e7062af9c1a545616a8c4e31b1a Mon Sep 17 00:00:00 2001 From: Francis Lachapelle Date: Tue, 6 Apr 2021 16:49:05 -0400 Subject: [PATCH] fix(mail(css)): improve HTML sanitization of background attribute --- UI/MailPartViewers/UIxMailPartHTMLViewer.m | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/UI/MailPartViewers/UIxMailPartHTMLViewer.m b/UI/MailPartViewers/UIxMailPartHTMLViewer.m index 68188ea9d..aae031e82 100644 --- a/UI/MailPartViewers/UIxMailPartHTMLViewer.m +++ b/UI/MailPartViewers/UIxMailPartHTMLViewer.m @@ -18,8 +18,8 @@ * Boston, MA 02111-1307, USA. */ -#import #import +#import #import #import @@ -506,10 +506,10 @@ _xmlCharsetForCharset (NSString *charset) else skipAttribute = YES; } - else if (([name isEqualToString: @"background"] || - ([name isEqualToString: @"data"] - || [name isEqualToString: @"classid"])) - && [lowerName isEqualToString: @"object"]) + else if ([name isEqualToString: @"background"] || + (([name isEqualToString: @"data"] + || [name isEqualToString: @"classid"]) + && [lowerName isEqualToString: @"object"])) { value = [_attributes valueAtIndex: count]; name = [NSString stringWithFormat: @"unsafe-%@", name];