Project

General

Profile

« Previous | Next » 

Revision aacacbb8

Added by koszko over 1 year ago

improvement to also properly sanitize intrinsics in XML documents under older browsers (IceCat 60)

View differences:

test/haketilo_test/data/pages/scripts_to_block_2.xml
30 30 

  		




  31
  31
  
    
  <html:img xmlns:html="http://www.w3.org/1999/xhtml"


  		




  32
  32
  
    
	    src="data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg=="


  		




  33
  
  
    
	    onload="window.__run = [...(window.__run || []), 'melon'];console.log('delme melon')">


  		




  
  33
  
    
	    onload="window.__run = [...(window.__run || []), 'melon'];">


  		




  34
  34
  
    
  </html:img>


  		




  35
  35
  
    

  		




  36
  36
  
    
  <!-- Will execute -->


  		












Also available in:  Unified diff