added img to unneeded tags of xss middleware

akaunting · May 14, 2021 · 3c60543 · 3c60543
1 parent 5803f81
commit 3c60543
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/Config/firewall.php b/src/Config/firewall.php
@@ -389,7 +389,7 @@
                 '#-moz-binding[\x00-\x20]*:#u',
 
                 // Unneeded tags
-                '#</*(applet|meta|xml|blink|link|style|script|embed|object|iframe|frame|frameset|ilayer|layer|bgsound|title|base)[^>]*>?#i'
+                '#</*(applet|meta|xml|blink|link|style|script|embed|object|iframe|frame|frameset|ilayer|layer|bgsound|title|base|img)[^>]*>?#i'
             ],
 
             'auto_block' => [