Simplify sanitization of accepted HTML attributes

This will avoid converting & to an HTML entity.
This commit is contained in:
Francis Lachapelle committed 2017-08-22 10:02:28 -04:00
1 parent 1ac2ec7ad6
commit c6dbb88dc1
1 file changed
+2 -1
+2 -1
View File
@@ -686,7 +686,8 @@ static NSData* _sanitizeContent(NSData *theData)
if (!skipAttribute)
[resultPart appendFormat: @" %@=\"%@\"",
name, [value safeStringByEscapingXMLString: NO]];
name, [value stringByReplacingString: @"\""
withString: @""]];
}
if ([VoidTags containsObject: lowerName])