Skip to content

Commit 628c393

Browse files
authored
Merge pull request #940 from getformwork/security/add-sanitizer-missing-uri-attributes
Add missing URI attributes to `HtmlSanitizer`
2 parents b71f326 + c6dfbc5 commit 628c393

1 file changed

Lines changed: 12 additions & 2 deletions

File tree

formwork/src/Sanitizer/Reference/HtmlReference.php

Lines changed: 12 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -369,10 +369,20 @@ class HtmlReference
369369
*/
370370
public const array URI_ATTRIBUTES = [
371371
'action',
372-
'src',
372+
'archive',
373+
'background',
374+
'cite',
375+
'classid',
376+
'codebase',
377+
'data',
378+
'formaction',
373379
'href',
380+
'longdesc',
374381
'lowsrc',
375-
'background',
382+
'manifest',
376383
'ping',
384+
'poster',
385+
'src',
386+
'usemap',
377387
];
378388
}

0 commit comments

Comments
 (0)