[IMP] tools: sanitizer: frame tag
Do not try to keep frames as they are already removed. Indeed tag_to_kill contain the frame tag. This parameter has precedence on the ``frames`` parameter of the cleaner. It was therefore unnecessary.
This commit is contained in:
@@ -90,7 +90,6 @@ def html_sanitize(src, silent=True, strict=False, strip_style=False, strip_class
|
||||
})
|
||||
else:
|
||||
kwargs['safe_attrs_only'] = False # keep oe-data attributes + style
|
||||
kwargs['frames'] = False, # do not remove frames (embbed video in CMS blogs)
|
||||
|
||||
try:
|
||||
# some corner cases make the parser crash (such as <SCRIPT/XSS SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT> in test_mail)
|
||||
|
||||
Reference in New Issue
Block a user