Revision 95bc9b67
Added by koszko about 1 year ago
| content/policy_enforcing.js | ||
|---|---|---|
| 447 | 447 |
} |
| 448 | 448 |
|
| 449 | 449 |
const scripts = [...root.getElementsByTagNameNS(html_ns, "script"), |
| 450 |
...root.getElementsByTagNameNS(svg_ns, "svg")];
|
|
| 450 |
...root.getElementsByTagNameNS(svg_ns, "script")];
|
|
| 451 | 451 |
scripts.forEach(s => sanitize_script(s, policy)); |
| 452 | 452 |
temporary_html.replaceWith(root); |
| 453 | 453 |
scripts.forEach(s => desanitize_script(s, policy)); |
Also available in: Unified diff
fix SVG script blocking