Sanitize whitelisted attributes of HTML tags

This commit is contained in:
Francis Lachapelle
2017-06-05 15:14:48 -04:00
parent 2604e2bf59
commit b3f541b87e

View File

@@ -686,8 +686,7 @@ static NSData* _sanitizeContent(NSData *theData)
if (!skipAttribute)
[resultPart appendFormat: @" %@=\"%@\"",
name, [value stringByReplacingString: @"\""
withString: @"\\\""]];
name, [value safeStringByEscapingXMLString: NO]];
}
if ([VoidTags containsObject: lowerName])