[IMP] tools: sanitizer: frame tag

Do not try to keep frames as they are already removed. Indeed tag_to_kill contain
the frame tag. This parameter has precedence on the ``frames`` parameter of the
cleaner. It was therefore unnecessary.
This commit is contained in:
Thibault Delavallée
2016-03-02 14:33:14 +01:00
parent c9e38cae9f
commit cf2318a76d
-1
View File
@@ -90,7 +90,6 @@ def html_sanitize(src, silent=True, strict=False, strip_style=False, strip_class
})
else:
kwargs['safe_attrs_only'] = False # keep oe-data attributes + style
kwargs['frames'] = False, # do not remove frames (embbed video in CMS blogs)
try:
# some corner cases make the parser crash (such as <SCRIPT/XSS SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT> in test_mail)